---
title: "Official Joomla! Announcements"
description: "We help designers, developers, hobbyists and business owners get the most out of the Joomla CMS.  Join us at our free monthly meetups, and let us help you with your Joomla projects."
url: "https://www.joomlalondon.co.uk/official-joomla-announcements?start=270"
date: "2026-09-09T13:45:11+00:00"
language: "en-GB"
---

#  Official Joomla! Announcements

##  [ JS Font Awesome Migrate ](https://www.joomlalondon.co.uk/official-joomla-announcements/js-font-awesome-migrate)

**JS Font Awesome Migrate** plugin allows you to migrate Font Awesome 4 to 5 without the need of manually editing the templates or extensions code. Font Awesome 5 breaks backwards compatibility with Font Awesome 4 by changing both the prefixes and also the names of certain icon classes. A lot of templates and extensions are still using the outdated Font Awesome 4, therefore, users who want to use the newest icons are facing the compatibility issues.

**Features:**
\- Loads the latest Font Awesome 5 library on your website
\- Converts FA 4 icons to FA5
\- Possibility to manually add new or missing icons

Read more  [http://feeds.joomla.org/~r/JoomlaExtensions/~3/FxJIUOZvAKw/js-font-awesome-migrate](http://feeds.joomla.org/~r/JoomlaExtensions/~3/FxJIUOZvAKw/js-font-awesome-migrate "JS Font Awesome Migrate")

##  [ \[20181005\] - Core - CSRF hardening in com\_installer ](https://www.joomlalondon.co.uk/official-joomla-announcements/20181005-core-csrf-hardening-in-com-installer)

- **Project:** Joomla!
- **SubProject:** CMS
- **Impact:** Moderate
- **Severity:** Low
- **Versions:** 2.5.0 through 3.8.12
- **Exploit type:** CSRF
- **Reported Date:** 2018-September-26
- **Fixed Date:** 2018-October-02
- **CVE Number:** [CVE-2018-17858](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17858)

### Description

Added additional CSRF hardening in com\_installer actions in the backend.

### Affected Installs

Joomla! CMS versions 2.5.0 through 3.8.12

### Solution

Upgrade to version 3.8.13

### Contact

The JSST at the [Joomla! Security Centre](https://developer.joomla.org/security-centre.html "Contact the JSST").

**Reported By:** [Raviraj A. Powar](https://www.twitter.com/ravirajpowar)Read more  [http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/nfI3\_UnJIrM/755-20181005-core-csrf-hardening-in-com-installer.html](http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/nfI3_UnJIrM/755-20181005-core-csrf-hardening-in-com-installer.html "[20181005] - Core - CSRF hardening in com_installe")

##  [ \[20181004\] - Core - ACL Violation in com\_users for the admin verification ](https://www.joomlalondon.co.uk/official-joomla-announcements/20181004-core-acl-violation-in-com-users-for-the-admin-verification)

- **Project:** Joomla!
- **SubProject:** CMS
- **Impact:** Moderate
- **Severity:** Low
- **Versions:** 1.5.0 through 3.8.12
- **Exploit type:** ACL Violation
- **Reported Date:** 2017-December-27
- **Fixed Date:** 2018-October-02
- **CVE Number:** [CVE-2018-17855](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17855)

### Description

In case that an attacker gets access to the mail account of an user who can approve admin verifications in the registration process he can activate himself.

### Affected Installs

Joomla! CMS versions 1.5.0 through 3.8.12

### Solution

Upgrade to version 3.8.13

### Contact

The JSST at the [Joomla! Security Centre](https://developer.joomla.org/security-centre.html "Contact the JSST").

**Reported By:** Paul FreemanRead more  [http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/qGhSucxwoZo/754-20181004-core-acl-violation-in-com-users-for-the-admin-verification.html](http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/qGhSucxwoZo/754-20181004-core-acl-violation-in-com-users-for-the-admin-verification.html "[20181004] - Core - ACL Violation in com_users for")

##  [ \[20181003\] - Core - Access level Violation in com\_tags ](https://www.joomlalondon.co.uk/official-joomla-announcements/20181003-core-access-level-violation-in-com-tags)

- **Project:** Joomla!
- **SubProject:** CMS
- **Impact:** Moderate
- **Severity:** Low
- **Versions:** 3.1.0 through 3.8.12
- **Exploit type:** ACL Violation
- **Reported Date:** 2018-June-20
- **Fixed Date:** 2018-October-02
- **CVE Number:** [CVE-2018-17857](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17857)

### Description

Inadequate checks on the tags search fields can lead to an access level violation.

### Affected Installs

Joomla! CMS versions 3.1.0 through 3.8.12

### Solution

Upgrade to version 3.8.13

### Contact

The JSST at the [Joomla! Security Centre](https://developer.joomla.org/security-centre.html "Contact the JSST").

**Reported By:** Андрей КапитановRead more  [http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/nIIfD6jUDgU/753-20181003-core-access-level-violation-in-com-tags.html](http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/nIIfD6jUDgU/753-20181003-core-access-level-violation-in-com-tags.html "[20181003] - Core - Access level Violation in com_")

 Page 55 of 55

## Schema

```json
{ "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Start", "item": "https://www.joomlalondon.co.uk" }, { "@type": "ListItem", "position": 2, "name": "Official Joomla! Announcements", "item": "https://www.joomlalondon.co.uk/official-joomla-announcements" } ] }
```