Kunena 7.0.9 & Kunena 6.4.14 – Security Updates Released

The Kunena team has announce the arrival of Kunena 7.0.9 [K 7.0.9] in stable which is now available for download as a native Joomla extension for J! 5.4.x/6.0.x./6.1.x. This version addresses most of the issues that were discovered in K 6.2 / K 6.3 / K 6.4 and issues discovered during the last development stages of K 7.0

Sticky Kunena 6.4.14 security release for Joomla! 5.0/5.1/5.2/5.3/5.4/6.0/6.1

More
3 weeks 4 days ago #235285 by xillibit
Introduction:
The Kunena team is thrilled to announce the fourteenth release...

Introduction:

The Kunena team is thrilled to announce the fourteenth release (security release) of Kunena 6.4, a native Joomla extension for Joomla! 5.0, 5.1, 5.2, 5.3, 5.4, 6.0 and 6.1. It needs the compatbility plugin to be enabled to be installed on Joomla! 6.0.x, this release (K6.4.13) is offered for people already on Joomla! 6.0 to be able to update to K7.0.x. For people still on K6.3.x, the update to K6.4.x version isn't proposed because some users has still Joomla! 4.4.x.

We are changed translation platform, we are now moved to crowdin for this release and the next releases : crowdin kunena. The translators are still needed to update the languages on crowdin because some aren't enough translated.

The security support of Kunena 6.4.x will end by december 2026 so please think to upgrade to Kunena 7.0.

The support for Joomla! 6.1 has been added in this release with plugin compatibility mode to allow upgrade to Kunena 7.0.

Kunena 6.4 has been designed to work on Joomla! 5.0 and later, the requirements are the followings :
  • Php 8.1.0 to Php 8.4.x
  • MySQL 8.0.13 to MySQL 9.2.0
  • Bootstrap 5.1

The work done in Kunena 6.4 is the following:

  • Some security issues fixed - thanks to ruud to have reported them
  • Some security issues fixed - thanks to pbugbounty to have reported them
  • Removing CMSObject extends to some Kunena classes to comply with removed things planned for Joomla! 6.0 (thanks to svanschu)
  • Allow to be used on php 8.4 if you are on Joomla! 5.2.x, it will give some deprecated errors messages
  • Replace some deprecated usage of methods Joomla! of getError(), getDBO() and Toolbar::getInstance()
  • Allow avif and webp to be added in attachment

Download:

Download K6.4.14 security release here: https://github.com/Kunena/Kunena-Forum/releases/tag/6.4.14

This means that the Kunena 6.3 series is approching the end of life and will be discountinued, with the future release of K6.4 in stable there won't be new versions of K6.3 after that.

Donations

Any donations are needed for future support.


I don't provide support by PM, because this can be useful for someone else.
The following user(s) said Thank You: Leen

Please Log in or Create an account to join the conversation.

More
3 weeks 4 days ago #235286 by Pinkeltje
Can you please have a look at xml. Auto update is not working..
update.kunena.org/6.4/pkg_kunena_languages.xml
When checking I discovered that downloadurl is not correct:
Code:
<downloadurl type="full" format="zip"> https://github.com/Kunena/Kunena-Forum/releases/download/6.4.14/pkg_kunena_v6.4.14_2026-09-10.zip </downloadurl>
Because download url uses pkg, there is (of course), no error. But after I updated both package and languages, I discovered that update for language kept coming back.
 
The following user(s) said Thank You: xillibit

Please Log in or Create an account to join the conversation.

More
3 weeks 4 days ago #235287 by xillibit
Hello,

Thanks for the report i have just fixed it

I don't provide support by PM, because this can be useful for someone else.

Please Log in or Create an account to join the conversation.

Time to create page: 0.357 seconds