Spett.le Visitatore,

sono stati effettuati sul Suo sito web, gli aggiornamenti di sicurezza rilasciati in data odierna 02/03/2021, relativi alle vulnerabilità elencate di seguito e pubblicate sul bollettino ufficiale CVE (Common Vulnerabilities and Exposures).

[20210301] - Core - Insecure randomness within 2FA secret generation

[20210302] - Core - Potential Insecure FOFEncryptRandval

[20210303] - Core - XSS within alert messages showed to users

[20210304] - Core - XSS within the feed parser library

[20210305] - Core - Input validation within the template manager

[20210306] - Core - com_media allowed paths that are not intended for image uploads

[20210307] - Core - ACL violation within com_content frontend editing

[20210308] - Core - Path Traversal within joomla/archive zip class

[20210309] - Core - Inadequate filtering of form contents could allow to overwrite the author field

Sono inoltre stati apportati numerosi bug fixes tra cui:

• Fix Save as Copy tag
• Fix published attribute for Tag field
• Fix batch menu items
• Stream transport should enable verify_peer_name when possible
• Optimize the code for rename incorrectly cased files on update
• Addional PHP 8 improvments