Discuss Joomla! 4.3.2

[pe7er]

Here you can discuss about the release of Joomla 4.3.2

See Announcement: viewtopic.php?f=8&t=1001996

[PhilTaylor-Prazgod]

It should be noted that Joomla 3 has the same lack of rate limiting on guessing of the backup 2FA codes and the Joomla JSST dismissed fixing that security issue in Joomla citing if it as “unfeasable” [sic] to guess the 16 digit backup code despite zero rate limiting, parallel requests and known key space. Therefore if you are relying on 2FA in Joomla 3 (and if your credentials are guessed) then there is a mathematical statistical chance that hackers can guess one of your 10 16-digit backup codes in your lifetime. Impact: Critical. Probability: statistically not insignificant as there is zero mitigation apart from integer length.

If you rely on the fact you use USB keys and you think your 2FA is cryptographically secure because you use hardware USB keys (yubikey) then you are wrong and the math for guessing your backup codes is easier than fooling the system with a fake USB Authenticator.

[gilplane]

Hi,
Two website updated from J4.3.1 to 4.3.2 > all seems ok.
Thanks to all volonters !

[Pavel-ww]

Hi all. Updates were successful. But in connection with changes in Cassiopea, several questions arose. I created a separate topic. I would be grateful for the feedback.

viewtopic.php?f=815&t=1002004

[formfranska]

Multiple sites updated (including multilang). No issues. Thank you JTeam
YOOtheme Version 4.0.2
PHP 8.1.19

[Kompas]

Hello,
31-05-2023,
Updated 5 little live sites and 1 local site from 4.3.1 to 4.3.2.
No problems untill now. Hope it stays that way (and that updates are well tested before release).
Still do not feel comfortable tackling bigger projects. I'll see what gives.
thanks, Kompas

[gilplane]

Again around 8 websites updates from 4.3.1 to 4.3.2 Gantry Rockettheme/Hikashop/Widgetkit/JCE/RSJoomla etc... . All is ok.
Many thanks to the volonteers !

[xfsgpr]

All is ok.

Same here on my very basic Joomla Test Site:

I was asked to share this here:

I just upgraded #Joomla on https://joomla4.mainsite.tk via #Softaculous #PHP