Discuss Joomla! 3.6.4

A place to discuss recent announcements made by the Joomla! Core Team. Let's hear what you have to say.
JocelynJoomla
Joomla! Apprentice
Joomla! Apprentice
Posts: 7
Joined: Tue Sep 13, 2016 4:03 pm

Re: Discuss Joomla! 3.6.4

Post by JocelynJoomla » Thu Oct 27, 2016 5:10 pm

Did that and it's still saying 3.6.2 - so weird!

JocelynJoomla
Joomla! Apprentice
Joomla! Apprentice
Posts: 7
Joined: Tue Sep 13, 2016 4:03 pm

Re: Discuss Joomla! 3.6.4

Post by JocelynJoomla » Thu Oct 27, 2016 5:21 pm

leolam wrote:@JocelynJoomla Clear All caches & (Joomla) Browser cache

Leo 8)
I did that and it's still saying I'm on version 3.6.2. This is so weird! It definitely upgraded.

User avatar
JAVesey
Joomla! Hero
Joomla! Hero
Posts: 2612
Joined: Tue May 14, 2013 1:21 pm
Location: Cardiff, Wales, UK
Contact:

Re: Discuss Joomla! 3.6.4

Post by JAVesey » Thu Oct 27, 2016 5:52 pm

@JocelynJoomla
What does the last line of /logs/joomla_update.php say?
John V
Cardiff, Wales, UK
Joomla 5.0.3 "live" site on PHP 8.2.15 and MariaDB 10.11.7
Joomla 5.0.3 on XAMMP for OSX with PHP 8.2.4 and MariaDB 10.4.28

User avatar
pe7er
Joomla! Master
Joomla! Master
Posts: 24911
Joined: Thu Aug 18, 2005 8:55 pm
Location: Nijmegen, Netherlands
Contact:

Re: Discuss Joomla! 3.6.4

Post by pe7er » Fri Oct 28, 2016 6:51 am

foxter wrote:I have updated my website from j3.6.3 to joomla 3.6.4. Now I am not able to login to my website. Is there any possibility to downgrade back to 3.6.3?
Downgrading to Joomla 3.6.3 is strongly dis-recommended as Joomla 3.6.4 is a security release that solves a security issue with older J3.x versions.

Could you try it with another browser?

Could you try to create a new Super Admin account: https://docs.joomla.org/How_do_you_reco ... assword%3F
Kind Regards,
Peter Martin, Global Moderator
Company website: https://db8.nl/en/ - Joomla specialist, Nijmegen, Netherlands
The best website: https://the-best-website.com

JocelynJoomla
Joomla! Apprentice
Joomla! Apprentice
Posts: 7
Joined: Tue Sep 13, 2016 4:03 pm

Re: Discuss Joomla! 3.6.4

Post by JocelynJoomla » Fri Oct 28, 2016 8:06 am

JAVesey wrote:@JocelynJoomla
What does the last line of /logs/joomla_update.php say?
Hi it says:
2016-10-27T09:32:01+00:00 INFO 92.18.128.29 update File Joomla_3.6.4-Stable-Update_Package.zip successfully downloaded.

Does that mean I am really stupid and it only downloaded and didn't actually update?

User avatar
JAVesey
Joomla! Hero
Joomla! Hero
Posts: 2612
Joined: Tue May 14, 2013 1:21 pm
Location: Cardiff, Wales, UK
Contact:

Re: Discuss Joomla! 3.6.4

Post by JAVesey » Fri Oct 28, 2016 8:31 am

Yes! That is the first step of a number of steps; mine says:

Code: Select all

2016-10-25T15:06:14+00:00	INFO 82.17.39.165	update	Update started by user [username] (711). Old version is 3.6.3.
2016-10-25T15:06:14+00:00	INFO [IP Address]	update	Downloading update file from https://github.com/joomla/joomla-cms/releases/download/3.6.4/Joomla_3.6.4-Stable-Update_Package.zip.
2016-10-25T15:06:28+00:00	INFO [IP Address]	update	File Joomla_3.6.4-Stable-Update_Package.zip successfully downloaded.
2016-10-25T15:06:29+00:00	INFO [IP Address]	update	Starting installation of new version.
2016-10-25T15:07:26+00:00	INFO [IP Address]	update	Finalising installation.
2016-10-25T15:07:26+00:00	INFO [IP Address]	update	Deleting removed files and folders.
2016-10-25T15:07:28+00:00	INFO [IP Address]	update	Cleaning up after installation.
2016-10-25T15:07:28+00:00	INFO [IP Address]	update	Update to version 3.6.4 is complete.
I think you need to attend to this :)

HTH
John V
Cardiff, Wales, UK
Joomla 5.0.3 "live" site on PHP 8.2.15 and MariaDB 10.11.7
Joomla 5.0.3 on XAMMP for OSX with PHP 8.2.4 and MariaDB 10.4.28

JocelynJoomla
Joomla! Apprentice
Joomla! Apprentice
Posts: 7
Joined: Tue Sep 13, 2016 4:03 pm

Re: Discuss Joomla! 3.6.4

Post by JocelynJoomla » Fri Oct 28, 2016 8:33 am

JAVesey wrote:Yes! That is the first step of a number of steps; mine says:

Code: Select all

2016-10-25T15:06:14+00:00	INFO 82.17.39.165	update	Update started by user [username] (711). Old version is 3.6.3.
2016-10-25T15:06:14+00:00	INFO [IP Address]	update	Downloading update file from https://github.com/joomla/joomla-cms/releases/download/3.6.4/Joomla_3.6.4-Stable-Update_Package.zip.
2016-10-25T15:06:28+00:00	INFO [IP Address]	update	File Joomla_3.6.4-Stable-Update_Package.zip successfully downloaded.
2016-10-25T15:06:29+00:00	INFO [IP Address]	update	Starting installation of new version.
2016-10-25T15:07:26+00:00	INFO [IP Address]	update	Finalising installation.
2016-10-25T15:07:26+00:00	INFO [IP Address]	update	Deleting removed files and folders.
2016-10-25T15:07:28+00:00	INFO [IP Address]	update	Cleaning up after installation.
2016-10-25T15:07:28+00:00	INFO [IP Address]	update	Update to version 3.6.4 is complete.
I think you need to attend to this :)

HTH
Blinking Flip! What a numpty! ;)

User avatar
JAVesey
Joomla! Hero
Joomla! Hero
Posts: 2612
Joined: Tue May 14, 2013 1:21 pm
Location: Cardiff, Wales, UK
Contact:

Re: Discuss Joomla! 3.6.4

Post by JAVesey » Fri Oct 28, 2016 8:34 am

We all live and learn :)
John V
Cardiff, Wales, UK
Joomla 5.0.3 "live" site on PHP 8.2.15 and MariaDB 10.11.7
Joomla 5.0.3 on XAMMP for OSX with PHP 8.2.4 and MariaDB 10.4.28

JocelynJoomla
Joomla! Apprentice
Joomla! Apprentice
Posts: 7
Joined: Tue Sep 13, 2016 4:03 pm

Re: Discuss Joomla! 3.6.4

Post by JocelynJoomla » Fri Oct 28, 2016 9:00 am

JAVesey wrote:We all live and learn :)
The weird thing was it did look like it was running through the upgrade. Ah well. Just backing up again now to start again!

User avatar
foxter
Joomla! Apprentice
Joomla! Apprentice
Posts: 26
Joined: Wed Oct 26, 2016 9:29 am
Contact:

Re: Discuss Joomla! 3.6.4

Post by foxter » Fri Oct 28, 2016 3:09 pm

pe7er wrote:
foxter wrote:I have updated my website from j3.6.3 to joomla 3.6.4. Now I am not able to login to my website. Is there any possibility to downgrade back to 3.6.3?
Downgrading to Joomla 3.6.3 is strongly dis-recommended as Joomla 3.6.4 is a security release that solves a security issue with older J3.x versions.

Could you try it with another browser?

Could you try to create a new Super Admin account: https://docs.joomla.org/How_do_you_reco ... assword%3F
With another browser it is working. :-[

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 20631
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ Germany/ S'pore/Bogor/ North America
Contact:

Re: Discuss Joomla! 3.6.4

Post by leolam » Fri Oct 28, 2016 5:11 pm

So that means that it is browser setting related and not a Joomla issue

Leo 8)
Joomla's #1 Professional Services Provider:
#Joomla Professional Support: https://gws-desk.com -
#Joomla Specialized Hosting Solutions: https://gws-host.com -

sozzled
I've been banned!
Posts: 13639
Joined: Sun Jul 05, 2009 3:30 am
Location: Canberra, Australia

Re: Discuss Joomla! 3.6.4

Post by sozzled » Sat Oct 29, 2016 12:05 am

Unfortunately it was only a matter of time before someone advertised to the world how to exploit Jooma sites that have not been updated with the latest security changes. I've just read how it's done. Unfortunately there are people who will use this kind of information and embark on attacks on vulnerable Joomla sites around the world. Whether or not this causes a similar wave of hacked sites as we witnessed a year ago (and because site owners are sometimes a little cavalier about keeping their sites up-to-date) remains to be seen.

This probably means that people face three choices:

1) Update their sites to J! 3.6.4 now—and potentially deal with any other, probably unrelated, problems as a matter of course (and we'll do our best to assist them here on this forum);

2) Quarantine their sites now: i.e. put them offline—deny hackers the opportunity to exploit those sites—while upgrading them one by one before putting them back online again; or

3) Take their chances and risk being attacked (but, remember, there were plenty of warnings about this).

blueatom
Joomla! Fledgling
Joomla! Fledgling
Posts: 2
Joined: Fri Apr 11, 2008 6:21 pm

Re: Discuss Joomla! 3.6.4

Post by blueatom » Sun Oct 30, 2016 2:59 pm

Hi, I just updated 2 unrelated sites (3.5 to 3.6.4) and in the end the instalation asks for user and password to complete the update - since it is the first time I encounter this - is this normal? or it means the sites been compromised?
Thx

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 20631
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ Germany/ S'pore/Bogor/ North America
Contact:

Re: Discuss Joomla! 3.6.4

Post by leolam » Sun Oct 30, 2016 3:01 pm

This is normal and expected behavior

Leo 8)
Joomla's #1 Professional Services Provider:
#Joomla Professional Support: https://gws-desk.com -
#Joomla Specialized Hosting Solutions: https://gws-host.com -

blueatom
Joomla! Fledgling
Joomla! Fledgling
Posts: 2
Joined: Fri Apr 11, 2008 6:21 pm

Re: Discuss Joomla! 3.6.4

Post by blueatom » Sun Oct 30, 2016 3:08 pm

Thank you! I was starting to get paranoid since, weirdly, I cant find any reference, anywhere to this (new, at least to me) "feature" :)
Cheers

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 20631
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ Germany/ S'pore/Bogor/ North America
Contact:

Re: Discuss Joomla! 3.6.4

Post by leolam » Sun Oct 30, 2016 3:14 pm

@blueatom .... glad to be of help

Leo 8)
Joomla's #1 Professional Services Provider:
#Joomla Professional Support: https://gws-desk.com -
#Joomla Specialized Hosting Solutions: https://gws-host.com -

Farah Y
Joomla! Fledgling
Joomla! Fledgling
Posts: 2
Joined: Thu Nov 03, 2016 3:48 am

Re: Discuss Joomla! 3.6.4

Post by Farah Y » Thu Nov 03, 2016 6:50 am

I have updated our website to the latest Joomla! 3.6.4. Website is running as per normal.
But when I try to go to Extensions > Manage, to install/update extensions, I received a 403 error: Access to the Joomla! installer is disabled. Upon checking on the permissions, everything seems in order; folders with 755 permission and files with 644. Tmp and log path are correct. Would appreciate your help and advice. Thanks heaps!

jsparek
Joomla! Apprentice
Joomla! Apprentice
Posts: 23
Joined: Wed Oct 03, 2012 6:37 pm

Re: Discuss Joomla! 3.6.4

Post by jsparek » Thu Nov 03, 2016 4:14 pm

Does Joomla! have a mailing list that just announces new Joomla! releases? I'm just looking for something that sends me an email whenever you release a new version of Joomla! I don't want one that is littered with other discussions.

Does one exist?

User avatar
imanickam
Joomla! Master
Joomla! Master
Posts: 28191
Joined: Wed Aug 13, 2008 2:57 am
Location: Chennai, India

Re: Discuss Joomla! 3.6.4

Post by imanickam » Thu Nov 03, 2016 4:24 pm

jsparek wrote:Does Joomla! have a mailing list that just announces new Joomla! releases? I'm just looking for something that sends me an email whenever you release a new version of Joomla! I don't want one that is littered with other discussions.
In your Joomla! site, there is a plugin titled "System - Joomla! Update Notification" that can send emails to the appropriate super users when a new version of Joomla! is available. You can even customize the information sent.
This plugin periodically checks for the availability of new Joomla! versions. When one is found it will send you an email, reminding you to update Joomla!. Pro Tip: You can customise the email message by overriding the language string keys PLG_SYSTEM_UPDATENOTIFICATION_EMAIL_SUBJECT and PLG_SYSTEM_UPDATENOTIFICATION_EMAIL_BODY.
Ilagnayeru (MIG) Manickam | இளஞாயிறு மாணிக்கம்
Joomla! - Global Moderators Team | Joomla! Core - Tamil (தமிழ்) Translation Team Coordinator
Former Joomla! Translations Coordination Team Lead
Eegan - Support the poor and underprivileged

User avatar
ribo
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 3507
Joined: Sun Jan 03, 2010 8:47 pm
Contact:

Re: Discuss Joomla! 3.6.4

Post by ribo » Thu Nov 03, 2016 4:30 pm

jsparek wrote: I'm just looking for something that sends me an email whenever you release a new version of Joomla!
When you have System - Joomla! Update Notification enabled then it will send email to your super users to reminding you to update Joomla.
chat room spontes : http://www.spontes.com

User avatar
pe7er
Joomla! Master
Joomla! Master
Posts: 24911
Joined: Thu Aug 18, 2005 8:55 pm
Location: Nijmegen, Netherlands
Contact:

Re: Discuss Joomla! 3.6.4

Post by pe7er » Thu Nov 03, 2016 5:41 pm

ribo wrote:When you have System - Joomla! Update Notification enabled then it will send email to your super users to reminding you to update Joomla.
Alternatively you could subscribe yourself to this board: viewforum.php?f=8
When there are new notifications in that forum, you'll be notified.
Kind Regards,
Peter Martin, Global Moderator
Company website: https://db8.nl/en/ - Joomla specialist, Nijmegen, Netherlands
The best website: https://the-best-website.com

jsparek
Joomla! Apprentice
Joomla! Apprentice
Posts: 23
Joined: Wed Oct 03, 2012 6:37 pm

Re: Discuss Joomla! 3.6.4

Post by jsparek » Thu Nov 03, 2016 5:58 pm

I'm not seeing a Joomla! Update Notification in my Joomla!

User avatar
ribo
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 3507
Joined: Sun Jan 03, 2010 8:47 pm
Contact:

Re: Discuss Joomla! 3.6.4

Post by ribo » Thu Nov 03, 2016 8:10 pm

pe7er wrote:
ribo wrote:When you have System - Joomla! Update Notification enabled then it will send email to your super users to reminding you to update Joomla.
Alternatively you could subscribe yourself to this board: viewforum.php?f=8
When there are new notifications in that forum, you'll be notified.
Yes you are right. This is a good option
chat room spontes : http://www.spontes.com

User avatar
ribo
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 3507
Joined: Sun Jan 03, 2010 8:47 pm
Contact:

Re: Discuss Joomla! 3.6.4

Post by ribo » Thu Nov 03, 2016 8:13 pm

jsparek wrote:I'm not seeing a Joomla! Update Notification in my Joomla!
Please check it better, i think that you will find it in plugins-system . If you don t have it try discover button
chat room spontes : http://www.spontes.com

apsilva
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 162
Joined: Tue Jul 12, 2016 11:22 pm

Re: Discuss Joomla! 3.6.4

Post by apsilva » Thu Nov 03, 2016 9:31 pm

Probably more than half a million sites ...

Farah Y
Joomla! Fledgling
Joomla! Fledgling
Posts: 2
Joined: Thu Nov 03, 2016 3:48 am

Re: Discuss Joomla! 3.6.4

Post by Farah Y » Fri Nov 04, 2016 3:07 am

Farah Y wrote:I have updated our website to the latest Joomla! 3.6.4. Website is running as per normal.
But when I try to go to Extensions > Manage, to install/update extensions, I received a 403 error: Access to the Joomla! installer is disabled. Upon checking on the permissions, everything seems in order; folders with 755 permission and files with 644. Tmp and log path are correct. Would appreciate your help and advice. Thanks heaps!
HI everyone,just in case someone made a silly mistake like I did. I went thru gazillion of 403 error related forums and at the same time consulted with one of the server administrator. Finally, upon checking, the server administrator (who also has a superuser account for our joomla website) informed us that RS Firewall's configuration has disabled access to the Joomla installer.
So we fix that and it's ok now. Thank you all!

lippa
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Fri Nov 04, 2016 12:04 pm

Re: Discuss Joomla! 3.6.4

Post by lippa » Fri Nov 04, 2016 12:23 pm

Automatic security updates would certainly be appreciated. I was victim of recent vulnerabilities 20161001 to 20161003. New admin accounts appeared in the users list before I managed to run the update. Could you tell me if I should be cautious and clean the whole Joomla installation and probably even the server (cf. Joomla Security Checklist) or would be enough to continue with the current setup? Of course I removed the new admin accounts, but it seems nothing has been changed in the installation or on the server.

User avatar
leolam
Joomla! Master
Joomla! Master
Posts: 20631
Joined: Mon Aug 29, 2005 10:17 am
Location: Netherlands/ Germany/ S'pore/Bogor/ North America
Contact:

Re: Discuss Joomla! 3.6.4

Post by leolam » Sat Nov 05, 2016 2:35 am

lippa wrote: or would be enough to continue with the current setup?
yes, the vulnerability you point at was an issue with the user registration allowing for these kinds of 'administrator' registrations among others. You do not have to have any further fears. If you removed those users you should be fine. If you want to make sure all is ok subscribe to myjoomla.com and the first scan/audit is free. That will give you peace of mind for sure

Leo 8)
Joomla's #1 Professional Services Provider:
#Joomla Professional Support: https://gws-desk.com -
#Joomla Specialized Hosting Solutions: https://gws-host.com -

sebamasaguer
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Wed Nov 09, 2016 2:36 pm

Re: Discuss Joomla! 3.6.4

Post by sebamasaguer » Wed Nov 09, 2016 2:44 pm

After the last update I can not enter the module manager-> modules

sozzled
I've been banned!
Posts: 13639
Joined: Sun Jul 05, 2009 3:30 am
Location: Canberra, Australia

Re: Discuss Joomla! 3.6.4

Post by sozzled » Wed Nov 09, 2016 5:52 pm

sebamasaguer wrote:After the last update I can not enter the module manager-> modules
Although "can not enter" could mean anything, I am assuming that you mean "cannot edit". If you had read earlier posts in this topic you would have found the answer to your question. There is nothing, specifically, in the update from J! 3.6.3 to J! 3.6.4 that contributes to your problem. The issue came about when updating to J! 3.6.3 from an earlier version of Joomla. If you have not seen this problem before it is probably because

a) you have not tried to edit a module in the backend since updating to J! 3.6.3; or
b) you were using an older version of J! 3.x before you updated to J! 3.6.4 today.

In any case, the issue is documented and the reasons and the solution can be found here: viewtopic.php?f=710&t=937052


Locked

Return to “Announcements Discussions”