Discuss Joomla! 3.4.3

A place to discuss recent announcements made by the Joomla! Core Team. Let's hear what you have to say.
User avatar
pe7er
Joomla! Master
Joomla! Master
Posts: 21845
Joined: Thu Aug 18, 2005 8:55 pm
Location: Nijmegen, The Netherlands
Contact:

Discuss Joomla! 3.4.3

Postby pe7er » Thu Jul 02, 2015 5:02 pm

Here you can discuss about the release of Joomla 3.4.3

See Announcement: viewtopic.php?f=8&t=890785
Kind Regards,
Peter Martin, Global Moderator
https://db8.nl - Joomla specialist, Nijmegen, Nederland
Developer of Options Manager Lite https://db8.eu/download/file/options-manager-lite

edvro
Joomla! Fledgling
Joomla! Fledgling
Posts: 2
Joined: Mon Dec 04, 2006 10:41 pm

Re: Discuss Joomla! 3.4.3

Postby edvro » Fri Jul 03, 2015 8:01 am

Wanted to update joomla to 3.4.3
I get "Permission denied in /home/brodarto/public_html/libraries/joomla/filesystem/file.php on line 433""
(after emptying cache)
Please advice (Manual installation via extention also does not work)

User avatar
Per Yngve Berg
Joomla! Master
Joomla! Master
Posts: 23556
Joined: Mon Oct 27, 2008 9:27 pm
Location: Akershus, Norway

Re: Discuss Joomla! 3.4.3

Postby Per Yngve Berg » Fri Jul 03, 2015 8:36 am

You have file permissions issus on your server. Please use the FPA and post the result.

edvro
Joomla! Fledgling
Joomla! Fledgling
Posts: 2
Joined: Mon Dec 04, 2006 10:41 pm

Re: Discuss Joomla! 3.4.3

Postby edvro » Fri Jul 03, 2015 9:00 am

Thank yoy for your reply.
What is FPA?

User avatar
ribo
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 3059
Joined: Sun Jan 03, 2010 8:47 pm
Contact:

Re: Discuss Joomla! 3.4.3

Postby ribo » Fri Jul 03, 2015 10:07 am

chat room spontes : http://www.spontes.com

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 18253
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ UK/ S'pore/Jakarta/ North America
Contact:

Re: Discuss Joomla! 3.4.3

Postby leolam » Fri Jul 03, 2015 3:21 pm

edvro wrote:Thank yoy for your reply.
What is FPA?
Please post the results of the FPA in the "upgrade" forum. This is not the forum for that

Leo 8)
Celebrating 12-Years of Professional Joomla Support Services
- Joomla Professional Support:https://gws-desk.com -
- Joomla Specialized Hosting Solutions:https://gws-host.com -
- Member Joomla Bug Squad & J-CMS Release Team

User avatar
willkey
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 142
Joined: Mon Feb 25, 2008 6:02 pm
Location: Huntington, Vermont
Contact:

Re: Discuss Joomla! 3.4.3

Postby willkey » Fri Jul 03, 2015 4:08 pm

Hello esteemed colleagues,

I have been increasingly weary of jumping on the bandwagon and immediately updating when my control panel notifications to me there's one available. Seriously, how long should I wait before doing the update after it's initially released?

Thank you for your consideration,
Will

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 18253
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ UK/ S'pore/Jakarta/ North America
Contact:

Re: Discuss Joomla! 3.4.3

Postby leolam » Fri Jul 03, 2015 4:21 pm

willkey wrote:Hello esteemed colleagues,

I have been increasingly weary of jumping on the bandwagon and immediately updating when my control panel notifications to me there's one available. Seriously, how long should I wait before doing the update after it's initially released?

Thank you for your consideration,
Will
Fair statement Will and we do advise normally our clients to wait as well. In this case we have send out 7,000 emails to our clients to update immediately due to the severe issue some users will face with 3.4.2. Update mate! You are ok in this case (we have updated all our own sites if this helps )

Leo 8)
Last edited by leolam on Fri Jul 03, 2015 4:30 pm, edited 1 time in total.
Celebrating 12-Years of Professional Joomla Support Services
- Joomla Professional Support:https://gws-desk.com -
- Joomla Specialized Hosting Solutions:https://gws-host.com -
- Member Joomla Bug Squad & J-CMS Release Team

User avatar
willkey
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 142
Joined: Mon Feb 25, 2008 6:02 pm
Location: Huntington, Vermont
Contact:

Re: Discuss Joomla! 3.4.3

Postby willkey » Fri Jul 03, 2015 4:25 pm

Thank you. In this case, I am glad I waited. Seems like there was one right after the other!
Have a good day Mates

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 18253
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ UK/ S'pore/Jakarta/ North America
Contact:

Re: Discuss Joomla! 3.4.3

Postby leolam » Fri Jul 03, 2015 4:32 pm

Note I mentioned you actually need to update since 3.4.3 addresses some major issues that we never discovered during testing in the development but only showed up during general massive usage in production. Therefore we released so quickly major fixes!

Upgrade to Joomla 3.4.3 !

Leo 8)
Celebrating 12-Years of Professional Joomla Support Services
- Joomla Professional Support:https://gws-desk.com -
- Joomla Specialized Hosting Solutions:https://gws-host.com -
- Member Joomla Bug Squad & J-CMS Release Team

User avatar
willkey
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 142
Joined: Mon Feb 25, 2008 6:02 pm
Location: Huntington, Vermont
Contact:

Re: Discuss Joomla! 3.4.3

Postby willkey » Fri Jul 03, 2015 4:43 pm

will do. thanks

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 18253
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ UK/ S'pore/Jakarta/ North America
Contact:

Re: Discuss Joomla! 3.4.3

Postby leolam » Fri Jul 03, 2015 4:59 pm

Welcome as always. Glad to help!

Leo 8)
Celebrating 12-Years of Professional Joomla Support Services
- Joomla Professional Support:https://gws-desk.com -
- Joomla Specialized Hosting Solutions:https://gws-host.com -
- Member Joomla Bug Squad & J-CMS Release Team

Outbreaker
Joomla! Intern
Joomla! Intern
Posts: 53
Joined: Fri Jun 19, 2009 7:00 pm

Re: Discuss Joomla! 3.4.3

Postby Outbreaker » Fri Jul 03, 2015 6:07 pm

Are this 2 security bugs also effecting Joomla 2.5.28? If yes, is there a community fix for it?

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 18253
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ UK/ S'pore/Jakarta/ North America
Contact:

Re: Discuss Joomla! 3.4.3

Postby leolam » Sat Jul 04, 2015 5:36 am

Outbreaker wrote:Are this 2 security bugs also effecting Joomla 2.5.28? If yes, is there a community fix for it?
Joomla 2.5.28 is no longer supported and is End Of Life and you should upgrade. We (Joomla PLT, Security Team, Bug Squad) do not check any longer if 1.0/1.5/1.6 and 7/2.5.xx are potential insecure.

The upgrade (mini-migrate) to Joomla 3.4.3 is not difficult so simply update to make sure you are covered!

Leo 8)
Celebrating 12-Years of Professional Joomla Support Services
- Joomla Professional Support:https://gws-desk.com -
- Joomla Specialized Hosting Solutions:https://gws-host.com -
- Member Joomla Bug Squad & J-CMS Release Team

Outbreaker
Joomla! Intern
Joomla! Intern
Posts: 53
Joined: Fri Jun 19, 2009 7:00 pm

Re: Discuss Joomla! 3.4.3

Postby Outbreaker » Sat Jul 04, 2015 12:34 pm

The upgrade is difficult i have to redesign the whole template and update all the extensions, i simply need more time to do this i already upgraded 2 years ago form 1.5 to 2.5. :(
I was hoping that there would be a few people here on the forum that would also post the Security fixes for Joomla 2.5.28 to give people a little bit more time to upgrade. :'(

DavidBoggitt
Joomla! Guru
Joomla! Guru
Posts: 759
Joined: Wed Jan 09, 2008 9:16 pm
Contact:

Re: Discuss Joomla! 3.4.3

Postby DavidBoggitt » Sat Jul 04, 2015 4:39 pm

Security fixes should really be applied to J2.5 shouldn't they, if it's a relatively straightforward fix?

Just expecting users to migrate to 3.4.3 isn't really fair and some clients won't want to pay to migrate. What do we tell them... that's it's only a matter of time before you get hacked if you don't pay me to migrate your website :(
My website: http://www.davidboggitt.com/
Love and hate both devastate you, but at least love takes you to dinner first.

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 18253
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ UK/ S'pore/Jakarta/ North America
Contact:

Re: Discuss Joomla! 3.4.3

Postby leolam » Sat Jul 04, 2015 6:31 pm

DavidBoggitt wrote:Security fixes should really be applied to J2.5 shouldn't they
No since Joomla 2.5.xx has seen End Of Life and that was announced and communicated long before the December 2014 (!!!) EOL-date. Once again we cannot maintain all past versions and we won't.

You are suppose to upgrade/mini-migrate and nobody is forcing you to pay for a 3rd party. Where is that stated?. If you feel not comfortable to perform an upgrade/mini-migrate hire a professional services organization (as we are for instance) but most people can do this without us or similar support organizations without any issue (see my guides which are distributed all over the Joomla forums and I have been a co-author of the Joomla migration guides on the Joomla docs portal (!) so the ball is in your park!

Your perception that you have to hire pro's to do this and spend money is completely wrong! You only do that if you do not manage or you feel not comfortable or lacing time. Than companies as we are and many others as listed in the Joomla Resources Directory are able to help

Leo 8)
Celebrating 12-Years of Professional Joomla Support Services
- Joomla Professional Support:https://gws-desk.com -
- Joomla Specialized Hosting Solutions:https://gws-host.com -
- Member Joomla Bug Squad & J-CMS Release Team

User avatar
xfsgpr
Joomla! Guru
Joomla! Guru
Posts: 952
Joined: Mon Feb 14, 2011 4:02 am
Location: London

Re: Discuss Joomla! 3.4.3

Postby xfsgpr » Sat Jul 04, 2015 9:45 pm

willkey wrote:Hello esteemed colleagues,

I have been increasingly weary of jumping on the bandwagon and immediately updating when my control panel notifications to me there's one available. Seriously, how long should I wait before doing the update after it's initially released?

Thank you for your consideration,
Will



i never update anything so quickly especially when it comes to joomla. joomla has the habit of releasing one update and within a week they will release yet another update. It happened from 3.3.3 >> 3.3.4 >> 3.3.5 >> 3.3.6.

Don't you just love it!! It keeps Joomla Developers busy >> dig a hole, fill it up and dig another hole. etc etc. Wonderful. I love it and I treat it as part of my amusement because nothing excites me more than looking at the joomla updates coming so quickly like London buses which comes in pairs after a long wait.

Outbreaker
Joomla! Intern
Joomla! Intern
Posts: 53
Joined: Fri Jun 19, 2009 7:00 pm

Re: Discuss Joomla! 3.4.3

Postby Outbreaker » Sun Jul 05, 2015 2:19 pm

I don't see the point in not fixing the Joomla 3 security fixes also for Joomla 2. Is it really so hard to post the code changes in the forum for Joomla 2?

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 18253
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ UK/ S'pore/Jakarta/ North America
Contact:

Re: Discuss Joomla! 3.4.3

Postby leolam » Sun Jul 05, 2015 3:07 pm

Outbreaker wrote:I don't see the point in not fixing the Joomla 3 security fixes also for Joomla 2. Is it really so hard to post the code changes in the forum for Joomla 2?
Joomla 2.5.xx is End Of Life per December 2014 (which is 8 month's ago). Your statement could in such case also be valid to Joomla 1.0 dated 2005. Think that is real? Me not. We have ended support and that is it: period!
post the Security fixes for Joomla 2.5.28 to give people a little bit more time to upgrade
First EOL announcement of J2.5.xx was over 1.5 years ago. How much more time you need? --> Lifetime?

Leo 8)
Celebrating 12-Years of Professional Joomla Support Services
- Joomla Professional Support:https://gws-desk.com -
- Joomla Specialized Hosting Solutions:https://gws-host.com -
- Member Joomla Bug Squad & J-CMS Release Team

User avatar
mbabker
Joomla! Ace
Joomla! Ace
Posts: 1991
Joined: Sun Feb 28, 2010 8:26 pm
Location: White Bear Lake, MN, USA
Contact:

Re: Discuss Joomla! 3.4.3

Postby mbabker » Sun Jul 05, 2015 3:12 pm

I take it nobody has actually read the security notices published at http://developer.joomla.org/security-centre.html. One of them very clearly makes it known that it would never have affected 2.5. The other one is at best a long shot to actually execute. The fixes are published in the CMS code repo for the 3.4.2 release tag, someone could very easily review the commit to see what files changed and decide if the fix is pertinent enough for them to patch their 2.5 sites.

To restate what has been said here once again, it is Joomla's policy to not issue patches for end of support products. Since 1.5's end of support, there has been a total of ONE security issue that community members felt was urgent enough to publish a patch for that branch; this was not a patch published on behalf of the project. The one issue that may affect 2.5 is not urgent enough to warrant this; based on my understanding of the issue (disclaimer: I am a member of the security team), it is mostly hypothetical at best and to be able to exploit it your site is pretty much already compromised in some form.
Production Department Coordinator, Release Lead, CMS Maintainer, Framework Maintainer, Security Team Member, .org System Administrator

Manually updating Joomla? See https://gist.github.com/mbabker/d7bfb4e1e2fbc6b7815a733607f89281

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 18253
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ UK/ S'pore/Jakarta/ North America
Contact:

Re: Discuss Joomla! 3.4.3

Postby leolam » Sun Jul 05, 2015 3:17 pm

xfsgpr wrote:within a week they will release yet another update.
Look at the word "they" (!) Please note that Joomla is a collaboration of a community of people who spend private time. They = you and me! If you have comments on releases join development/testing/documentation and stop the sarcasm and do something positive instead of blaming all these very hard working and good willing (non paid) people of whom you makes fools

So join one of the Teams and make yourself useful instead of sitting on your ass and making non-favorable comments as usual?

Leo 8)
Celebrating 12-Years of Professional Joomla Support Services
- Joomla Professional Support:https://gws-desk.com -
- Joomla Specialized Hosting Solutions:https://gws-host.com -
- Member Joomla Bug Squad & J-CMS Release Team

User avatar
ribo
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 3059
Joined: Sun Jan 03, 2010 8:47 pm
Contact:

Re: Discuss Joomla! 3.4.3

Postby ribo » Sun Jul 05, 2015 3:25 pm

Outbreaker wrote:I don't see the point in not fixing the Joomla 3 security fixes also for Joomla 2. Is it really so hard to post the code changes in the forum for Joomla 2?

This is not happened only in joomla. Example: PHP not update 5.2 and 5.3 Mysql the same in some versions.
Also joomla 3 gives some new things and in the future newer versions will give you new things again.
Now about Joomla, Joomla community INFORM US when we must starting to migrate, so we have all the time to make our tests and migrate our clients before the previous version will be end of support. About the versions of joomla if you will ask me what i prefer i will say now definitely joomla 3.x
chat room spontes : http://www.spontes.com

Outbreaker
Joomla! Intern
Joomla! Intern
Posts: 53
Joined: Fri Jun 19, 2009 7:00 pm

Re: Discuss Joomla! 3.4.3

Postby Outbreaker » Sun Jul 05, 2015 6:32 pm

@mbabker
Yes i read the security notices, but i was not sure if it would be also mentioned in the security notices when it affected Joomla 2 too. ;)

@Joomla Team
You guys should think about a paid Privat/Corporation extended support for Joomla. ;)

Potus001
Joomla! Guru
Joomla! Guru
Posts: 586
Joined: Thu Nov 25, 2010 9:38 am

Re: Discuss Joomla! 3.4.3

Postby Potus001 » Mon Jul 06, 2015 8:09 am

If any product, not solely Joomla, has reached EOL, then how can one possibly expect support for it?

Joomla is a free product and, warts and all, it does an excellent job, not forgetting all the support teams behind it, who carry out this work in their own free time.

Outbreaker
Joomla! Intern
Joomla! Intern
Posts: 53
Joined: Fri Jun 19, 2009 7:00 pm

Re: Discuss Joomla! 3.4.3

Postby Outbreaker » Mon Jul 06, 2015 8:34 am

Windows XP is also EOL but it still gets Security Updates till 2019 with the paid extended support. :D

User avatar
Webdongle
Joomla! Master
Joomla! Master
Posts: 33096
Joined: Sat Apr 05, 2008 9:58 pm

Re: Discuss Joomla! 3.4.3

Postby Webdongle » Mon Jul 06, 2015 11:42 am

Outbreaker wrote:Windows XP is also EOL but it still gets Security Updates till 2019 with the paid extended support. :D
Perhaps you would like to pay one of the Joomla developers for security updates of EOL Joomla versions ?

Outbreaker
Joomla! Intern
Joomla! Intern
Posts: 53
Joined: Fri Jun 19, 2009 7:00 pm

Re: Discuss Joomla! 3.4.3

Postby Outbreaker » Mon Jul 06, 2015 2:29 pm

I think this would not be a bad idea for Joomla to create an extended support for a previous Joomla EOL version.
A lot of business websites would be for such interested in this instead of paying for a redesign and migration.
Corporate EOL License (Bug and Security fixes)
Private EOL License (Security fixes)
Last edited by Outbreaker on Mon Jul 06, 2015 3:11 pm, edited 1 time in total.

User avatar
mbabker
Joomla! Ace
Joomla! Ace
Posts: 1991
Joined: Sun Feb 28, 2010 8:26 pm
Location: White Bear Lake, MN, USA
Contact:

Re: Discuss Joomla! 3.4.3

Postby mbabker » Mon Jul 06, 2015 2:49 pm

If Joomla had a proper corporation backing it (compare to Drupal -> Acquia or WordPress -> Automattic), perhaps. Remember, all of Joomla is volunteer driven. It's an interesting business opportunity for an entrepreneur looking for a viable business model, but not something that an all-volunteer team can sustain.
Production Department Coordinator, Release Lead, CMS Maintainer, Framework Maintainer, Security Team Member, .org System Administrator

Manually updating Joomla? See https://gist.github.com/mbabker/d7bfb4e1e2fbc6b7815a733607f89281

RedEye
Joomla! Ace
Joomla! Ace
Posts: 1441
Joined: Sat Jan 21, 2006 8:42 pm

Re: Discuss Joomla! 3.4.3

Postby RedEye » Mon Jul 06, 2015 11:47 pm

Outbreaker wrote:Windows XP is also EOL but it still gets Security Updates till 2019 with the paid extended support. :D
And why did they offer such support? Yeah right because they have made multiple millions of dollars with it.
If you find at least 250 people who are willing to pay these 200 bucks (initial price from MS per device) for a year, I will offer you such support for J!2.5...
Otherwise, you really should upgrade my friend, because there are also some nice new features and not only security/bug fixes!


Return to “Announcements Discussions”

Who is online

Users browsing this forum: No registered users and 7 guests