Joomla 3.10.8 is Out
Joomla! 3.10.8 is now available. This is a security release for the 3.x series of Joomla which address a few security vulnerabilities and contains various bug fixes and improvements.
What's in 3.10.8?
Joomla 3.10.8 includes all security patches from 3.10.7 except 20220303 that has been reverted due to implementation issues.
Joomla! 3.10.8 Release (joomla.org)
Security Issues Fixed with 3.10.7
- Low Severity - Moderate Impact - Zip Slip within the Tar extractor
- Low Severity - Low Impact - Path Disclosure within filesystem error messages
- Low Severity - Moderate Impact - Missing input validation within com_fields class inputs
- Low Severity - High Impact - Inadequate filtering on the selected Ids
- Low Severity - Low Impact - Inadequate validation of internal URLs
Bug fixes and Improvements with 3.10.7
- Backport JQuery UI security patch for CVE-2021-41184
- Disable Google Fonts setting for 3.10.7+ new installations
- [Regression] Fix updating redirect values unintentionally changed
- Remove FLoC setting as it has been abandoned
- E-Mail Cloak: TLDs long as 10 will no longer truncated until
- Privacy Consent wording I agree vs I do not agree
Our Website Maintenance Department will be in contact with our clients regarding this upgrade. If you need this upgrade done on your website, please contact us.
Thank you,
-Webstix Support