Joomla 3.3.6 Security Updates have been released!

This release is considered a security release since it includes two resolved security issues associated with 3.3.5. A 3.2.7 release is also available for users who are still using Joomla! 3.2 which addresses the security issues and the upgrade component bug.

If you are currently running a Joomla! release on a server with PHP 5.3.10 or later, we encourage you to update immediately to Joomla! 3.3.6 via either the one-click update or the update downloads available at http://www.joomla.org/download.html.

Note that in order to update directly to 3.3.6 via the core update component, you must be running 3.2.2 or later due to the raised minimum supported PHP version and the update system not supporting checking the server’s PHP version in older releases. Older 3.x releases will be prompted to update to 3.2.7 before being presented the 3.3.6 update.

Special Download Instructions:

Because of the issue with the update component, users who are running 3.2.6 or 3.3.5 will be unable to update to the next release using Joomla's update component. These users will be required to update their Joomla! installation via the Extension Manager. Instructions for updating via the Extension Manager can be found on the Joomla! Documentation Wiki. Users who are running Joomla! 3.3.0 through 3.3.4 and 3.2.5 or earlier will be able to update using the update component. The Joomla! Documentation wiki contains full instructions on how to update your site.

What's in 3.3.6?

See the Joomla! 3.3.5 Milestone on GitHub for details of the items fixed.

Additionally, the following items were addressed based on user reports after yesterday's release:

• [#4403] - Password reset don't work in Joomla 3.3.5
• [#4394] - Error when adding tags via keyboard

Security Issues Fixed

• High Priority - Core - Remote File Inclusion More information »
• Medium Priority - Core - Denial of Service More information »

 For known issues with the 3.3.6 release, see the Version 3.3.6 FAQ in the documentation site.

Download

• New Installations: Download Joomla! 3.3.6 (Full package) »
  New installation instructions and technical requirements
  
  
• Update Package:Download Joomla! 3.3.6 (Update package) »
  Note: Please read the update instructions before updating.
  Please remember to clear your browser's cache after upgrading.
  
  
• 3.2.7 Package:Download Joomla! 3.2.7 (Update package) »
  Note: This package is only recommended for sites on servers running PHP versions 5.3.1 through 5.3.9; those on 5.3.10 or later are encouraged to update to 3.3.

PS: We provide a Joomla Upgrade Service alongside our other Joomla services to help take the stress out of updating your CMS and give you peace of mind that it is running the most current version. Find out more about our Joomla Upgrade Service here.

Thanks for reading!