Protection against a critical Joomla < 3.4.6 security bug

Posted December 14th, 2015 in System Status, Tech Corner. Tags: , , .

The authors of the Joomla software announced today that every version of Joomla below 3.4.6 has a critical security bug that allows “hackers” to take over a site.

The bug was in use by hackers for two days before the Joomla authors patched it, and we found several Joomla customer sites that had been modified as a result. We’ve restored backups of those sites and notified those customers directly, but we recommend that all Joomla users change their password to be safe, even if we didn’t notify you of a problem.

The best solution for Joomla users is to update to version 3.4.6 immediately. However, we also added a rule to our servers this morning to block any more attacks until our customers can update. The rule should ensure that if you use our hosting service, and your site hasn’t already been modified, hackers won’t be able to take advantage of this bug.

  1. Recent Posts

    1. PHP versions 8.1.30, 8.2.24, and 8.3.12
    2. MariaDB (MySQL) database server update from 10.5 to 10.11 (completed)
    3. Labor Day 2024 holiday hours
    4. PHP versions 8.2.22 and 8.3.10
    5. WordPress 6.6
    6. PHP versions 8.1.29, 8.2.21, and 8.3.9
    7. 4th of July 2024 holiday hours
    8. Memorial Day 2024 holiday hours
    9. PHP versions 8.2.19 and 8.3.7
    10. PHP versions 8.1.28, 8.2.18, and 8.3.6

  2. Categories

  3. Tags

    all servers email holiday hours linux mailman maintenance mod_security mysql network php phpmyadmin security server updates spam ssl status updates webmail wordpress zapp

  4. Feeds