The Joomla! Forum™

Well, the vulnerabilities were all very low risk so there is no significant threat.  From the Changelog: * SECURITY A6 [LOW Level]: Fixed [#5630] HRS attack on variable "url" * SECURITY A1 [LOW Level]: Fixed [#5654] Multiple fields subjected to cross-site scripting vulnerabilities * SECURITY A...

Ok, the .13 update kills all bridges and other login systems because of the new loginsystem. So far, so bad.

But, when the release does "Several low-risk security fixes" isn't it possible, that you post these fixes? People could patch their .12 Sites and they would still work.