The Joomla Training Cohort has been launched!

Please send any feedback or bug reports to tim@cybersalt.com (opens new link)  

The release of Joomla 3.8.8 came with 4 security changes and recommendations for past verisons of Joomla. That is what today's #maintenancemonday is all about.

 

 

 
00:00:00 โ€“ Stream Start & Setup
00:01:24 โ€“ Security Updates Overview
00:02:41 โ€“ ACL Text Filtering
00:03:33 โ€“ No Plain Text Password Emails
00:04:40 โ€“ Flash Upload Restrictions
00:05:48 โ€“ Disable "Mail to Friend"
00:06:19 โ€“ Multi-Site Tools
00:07:06 โ€“ Giveaway Details
00:08:01 โ€“ Closing & Community
00:09:07 โ€“ Post-Stream Check

Summary


1.Stream Introduction:
The host opens the show and provides a brief introduction, outlining the focus of the episode.

2.Joomla Update Overview: The main topic is introduced: reviewing the critical security patches included in Joomla version 3.8.8.

3.Security Update #1 โ€“ ACL Changes: The video explains the first update, which involves changes to Access Control List (ACL) text filtering to fix a potential vulnerability.

4.Security Update #2 โ€“ Password Emails: The host details the second fix, which disables the sending of plain-text passwords via email to prevent them from being intercepted.

5.Security Update #3 โ€“ Flash Uploads: The third security patch is covered, restricting the upload of Flash (SWF) files, a common malware vector, to enhance site safety.

6.Security Update #4 โ€“ "Mail to Friend": The video discusses the fourth update, where the "Mail to Friend" feature is disabled by default to close a spam exploitation vulnerability.

7.Tools for Mass Updates: The focus shifts to recommended tools and strategies for efficiently updating multiple Joomla sites to stay protected.

8.Community & Giveaway: The host engages with the audience, mentions a giveaway for a premium security or management tool, and highlights other community resources.

9.Final Recommendations & Closing: The host wraps up the main segment, strongly urging all Joomla administrators to apply these security updates immediately.

10.Post-Stream Q&A: The broadcast concludes with a brief post-stream segment for viewer questions and final technical checks.

Please send any feedback or bug reports or queries to;

Contact Tim Davis โ–บ This email address is being protected from spambots. You need JavaScript enabled to view it.

Joomla Training Cohort โ–บ https://cybersalt.com/jtc

JTC has been launched and is now accepting members https://cybersalt.com/services/subscriptions
mySites.guru โ–บ https://mysites.guru
Backing Up Your Joomla Site with Akeeba โ–บhttps://www.youtube.com/watch?v=4Xu4o0g2-RY&t=0s
FOLLOW US ON X(TWITTER!) โ–บ https://x.com/basicjoomla
LIKE US ON FACEBOOK! โ–บ https://www.facebook.com/basicjoomla
SUBSCRIBE US ON YOUTUBE โ–บ//www.youtube.com/@Basicjoomla

#basicjoomla

#cybersalt

Monday Maintenance 041

 


Interesting blog? Like it on Facebook, Post it or share this article on other bookmarking websites.

Written by:
Tim Davis is the founder and owner of Cybersalt.
Log in to comment

Add comment

Submit