Created attachment 278557 [details] patch www-apps/joomla-1.6.4 has been released. It fixes 4 security issues. See http://www.joomla.org/announcements/release-news/5374-joomla-164-released.html for the details. Please note that joomla-1.7.0 is going to be released next month and the users using the 1.6 series will need 1.6.4 to upgrade to the 1.7 series.
This bug is not confidential, I did this by accident. Thank you Olivier.
Thanks, folks.