04Apr Joomla 1.5.10 Security Release Now Available

img src=”http://www.joomla.org/images/stories/security_release.png” class=”float-img-left” alt=”Joomla 1.5.9 Released” / br /
pThe Joomla Project announces the evident accessibility of Joomla 1.5.10 [Wohmamni]. strongThis is the confidence recover as well as users have been strongly speedy to ascent immediately./strongbr /
br /
This recover contains 66 bug fixes, the single low-level confidence fix, as well as the single moderate-level confidence fix. It has been eleven weeks given the rel=’nofollow’ href=”http://www.joomla.org/announcements/release-news/5226-joomla-159-security-release-now-available.html”Joomla 1.5.9 was released/a upon Jan 10, 2009. The the rel=’nofollow’ href=”http://docs.joomla.org/Development_Working_Group”Development Working Group’s/a idea is to go upon to yield regular, revisit updates to the Joomla community./p
br /
br /
br /
br /
br /
h2Download/h2
h3a rel=’nofollow’ href=”http://joomlacode.org/gf/download/frsrelease/9910/37908/Joomla_1.5.10-Stable-Full_Package.zip”Click here to download Joomla 1.5.10 (Full package) »/a/h3
h3a rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/frs/?action=FrsReleaseBrowseamp;frs_package_id=4460″Click here to find an refurbish package. »/a/h3
h2Instructions/h2
ul
lia rel=’nofollow’ href=”http://help.joomla.org/content/category/48/268/302/”New installation/a as well as the rel=’nofollow’ href=”http://www.joomla.org/about-joomla/technical-requirements.html”technical requirements/a/li
lia rel=’nofollow’ href=”http://docs.joomla.org/Upgrading_1.5_from_an_existing_1.5x_version”Upgrade from an existent Joomla 1.5 version/a/li
lia rel=’nofollow’ href=”http://docs.joomla.org/Migrating_from_1.0.x_to_1.5_Stable”Migration from Joomla! 1.0.x/a/li
/ul
pWant to exam expostulate Joomla? Try the a rel=’nofollow’ href=”http://demo.joomla.org/”online demo/a or the a rel=’nofollow’ href=”http://demo.joomla.org/jumpbox.html”Joomla JumpBox/a. the rel=’nofollow’ href=”http://docs.joomla.org/Beginners”Documentation is accessible for beginners./a/p
h2Release Notes/h2
pCheck the a rel=’nofollow’ href=”http://docs.joomla.org/Category:Version_1.5.10_FAQ”Joomla 1.5.10 Post-Release Notes/a to see if there have been critical equipment as well as beneficial hints detected after the release./p
h3Security/h3
pOne low-level as well as the single moderate-level confidence emanate were bound in this release:/p
ul
liModerate Priority: A array of XSS as well as CSRF faults exist in the director application. Affected director components embody com_admin, com_media, com_search. Both com_admin as well as com_search enclose XSS vulnerabilities, as well as com_media contains 2 CSRF vulnerabilities. the rel=’nofollow’ href=”http://developer.joomla.org/security/news/293-20090301-core-multiple-xsscsrf.html”More inform »/a/li
liLow Priority: A XSS disadvantage exists in the difficulty perspective of com_content. the rel=’nofollow’ href=”http://developer.joomla.org/security/news/294-20090302-core-comcontent-xss.html”More inform »/a/li
/ul
pFor the single some-more information, revisit the a rel=’nofollow’ href=”http://developer.joomla.org/security.html”Joomla Security Center/a./p
h3Components/h3
ul
liArticle Alias no longer blank from Category Views (a title=”14228″ id=”txav” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14228″14228/a)/li
liSection List right away drills down rightly to the Category List with Global Content Filters (a title=”14510″ id=”muck” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14510″14510/a)/li
liWeb couple Router right away uses scold Category worth (a title=”14705″ id=”t5q:” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14705″14705/a)/li
liArticle HTML filtering scold when usually the single Filter organisation comparison (a title=”14758″ id=”hfy4″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14758″14758/a)/li
liTooltip Help prepared for Section, Category, as well as Article Alias (a title=”15007″ id=”py2q” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15007″15007/a)/li
liSorting lists by values alternative than Order prepared (a title=”15107″ id=”ziue” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15107″15107/a)/li
liArchived Article Filter Function functions rightly (a title=”15124″ id=”nm_b” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15124″15124/a)/li
liAmpersand in site name no longer breaks Position worth in vCard (a title=”15143″ id=”kl7.” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15143″15143/a)/li
liAdded “/” prior to URL in Remind Me as well as Password links for com_user (a title=”15215″ id=”am6l” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15215″15215/a)/li
liSearch functions scrupulously regulating general characters with SEF enabled (a title=”15233″ id=”m_n7″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15233″15233/a)/li
liRegister to Read More in route URL scold for Section as well as Category Menu Items (a title=”15266″ id=”lb6u” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15266″15266/a)/li
liMultiple Search Menu Items right away lapse scold ItemID (a title=”15293″ id=”jy.2″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15293″15293/a)/li
licom_media no longer wrongly loads CSS files from the backend (a title=”15354″ id=”vgyz” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15354″15354/a)/li
liFixed shabby XHTML outlay in com_content as well as com_contact (a title=”15362″ id=”j20c” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15362″15362/a)/li
liSmall errors in formula comments prepared for com_user (a title=”15461″ id=”ghx8″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15461″15461/a)/li
/ul
h3Modules/h3
ul
liChanging the module’s ‘Position’ worth right away rightly changes the worth for the ‘Order’ listbox. (a title=”12119″ id=”yi_2″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=12119″12119/a)/li
liWhen Module is saved, Module’s cache is right away privileged (a title=”12137″ id=”s0e2″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=12137″12137/a)/li
liEncoding duty for quotes as well as ampersands prepared in Modules (a title=”13111″ id=”g156″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=13111″13111/a)/li
liMenu picture regulating resolved (a title=”14071″ id=”rg9d” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14071″14071/a)/li
liMenu Alias respects Active environment (a title=”14767″ id=”luf3″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14767″14767/a)/li
liResolved tab blunder in mod_feed (a title=”14948″ id=”gm8n” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14948″14948/a)/li
liLogin Redirect earnings to stream page when no Redirect URL is specified (a title=”15376″ id=”sgp3″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15376″15376/a)/li
/ul
h3Plugins/h3
ul
liFixed ID tags used by openid.js (a title=”13285″ id=”jw1b” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=13285″13285/a)/li
liPagebreak functions rightly with JCE (a title=”14525″ id=”p8xt” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14525″14525/a)/li
liPagebreak outputs scold XHTML elements (a title=”14496″ id=”klzc” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14496″14496/a)/li
liPagebreak fairly marks active page (a title=”14558″ id=”z8l_” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14558″14558/a)/li
liPagebreak functions rightly with Section tables (a title=”14827″ id=”awa2″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14827″14827/a)/li
liCaching blunder resolved for Remember Me duty (a title=”14857″ id=”y:3o” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14857″14857/a)/li
liMenu Item changes have been right away cached scrupulously (a title=”14896″ id=”p:19″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14896″14896/a)/li
liSEF Plugin rightly handles “Data” charge (a title=”15137″ id=”mb_r” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15137″15137/a)/li
liLoad Position no longer deletes dollar pointer as well as subsequent dual positions, in Module outlay (a title=”15237″ id=”tlfv” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15237″15237/a)/li
/ul
h3Legacy/h3
ul
liNo bequest issues bound for this release./li
/ul
h3Templates/h3
ul
liBeez: Correct Last Updated date used in Section Blog (a title=”14571″ id=”ebf7″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14571″14571/a)/li
liJA Purity: All Article content no longer related when Category presented (a title=”14286″ id=”lwdc” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14286″14286/a)/li
lirhuk Milkyway: Correct authorEmail worth (a title=”14439″ id=”ub4k” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14439″14439/a)/li
liCorrected RTL emanate for Site Title when rodent hovering over Template Logo (a title=”14945″ id=”llsk” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14945″14945/a)/li
/ul
h3Language/h3
ul
liLocalization for user name prepared in registration form (a title=”14468″ id=”efca” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14468″14468/a)/li
liCorrected localization emanate for brand brand new Module (a title=”13999″ id=”f:t_” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=13999″13999/a)/li
liUser sum translatable (a title=”14710″ id=”zto9″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14710″14710/a)/li
liLocalization prepared for designation of Component#160; (a title=”14859″ id=”m140″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14859″14859/a)/li
liCopy Menu Items duty is right away translatable (a title=”14944″ id=”soxk” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14944″14944/a)/li
liPagebreak right away translatable (a title=”15300″ id=”on9s” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15300″15300/a)/li
liUninstalling the Component right away has all Language Strings (a title=”15375″ id=”j98v” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15375″15375/a)/li
/ul
h3Administrator/h3
ul
liCategories have been right away sortable in retreat sequence by Order interpretation component (a title=”14004″ id=”upl9″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14004″14004/a)/li
liParameter Element ID for folderlist as well as filelist have been scold (a title=”14514″ id=”hepd” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14514″14514/a)/li
liDate format scold for ‘checked out date’#160; (a title=”14381″ id=”m1vj” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14381″14381/a)/li
/ul
h3System/h3
ul
liInstallation of Extensions no longer fails when zip files have been enclosed (a title=”9701″ id=”z353″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=9701″9701/a)/li
liNo longer blank l10n in JApplicationHelper::parseXMLInstallFile() (a title=”11798″ id=”w2yu” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=11798″11798/a)/li
liResolved Javascript errors combined by prior SEF Background Image Fix (a title=”13973″ id=”i.y1″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=13973″13973/a)/li
liResolved complaint with blunder doing in JFactory::getXMLParser (a title=”14022″ id=”nock” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14022″14022/a)/li
liCase-sensitive picture extensions (a title=”14059″ id=”potq” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14059″14059/a)/li
liAtom feed validates rightly (a title=”14515″ id=”ki9s” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14515″14515/a)/li
liJString::RTrim process is scold (a title=”14491″ id=”hy8i” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14491″14491/a)/li
liRemoved reduced open tab in admin.categories.html.php (a title=”14660″ id=”cb2v” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14660″14660/a)/li
liJInstallerComponent::_rollback_menu() blunder resolved when removing DB Connector (a title=”14795″ id=”h2y6″ rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14795″14795/a)/li
liFile pierce right away rightly earnings “false” when not review or writable (a title=”14818″ id=”dqa-” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14818″14818/a)/li
liDirectory Permissions listed rightly for Temp as well as Log Folders (a title=”14865″ id=”w41-” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14865″14865/a)/li
liJFolder::folders no longer earnings nonessential notice (a title=”14875″ id=”ob:v” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=14875″14875/a)/li
liSetting Tooltip Offset functions rightly (a title=”15006″ id=”vz1.” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15006″15006/a)/li
liJArchiveZip::_extractNative() rightly identifies zip_open() disaster (a title=”15044″ id=”vg0-” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15044″15044/a)/li
liInstaller.php parseMedia points to scold printed matter (a title=”15047″ id=”g-mo” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15047″15047/a)/li
liCustom Install record upgraded upon Component designation (a title=”15217″ id=”qgur” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15217″15217/a)/li
liUndefined index HTTP_USER_AGENT blunder bound in behavior.php (a title=”15282″ id=”t4qg” rel=’nofollow’ href=”http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEditamp;tracker_item_id=15282″15282/a)/li
/ul
h2Statistics/h2
pStatistics for the 1.5.10 recover period:/p
ul
liJoomla 1.5.10 contains:
ul
li68 issues bound in SVN/li
li281 commits/li
/ul
/li
liTracker wake up resulted in the net diminution of 8 active issues:
ul
li176 brand brand new reports/li
li133 closed/li
li68 bound in SVN/li
/ul
/li
liAt the time the 1.5.10 recover was packaged, the tracker had 95 active issues:
ul
li44 open/li
li40 confirmed/li
li11 pending/li
/ul
/li
/ul
h2Joomla! Bug Squad/h2
pThanks to the a rel=’nofollow’ href=”http://docs.joomla.org/Bug_Squad”Joomla Bug Squad/a for their dedicated efforts questioning reports, regulating problems, as well as requesting rags to Joomla. If we find the bug with Joomla, the rel=’nofollow’ href=”http://docs.joomla.org/Filing_bugs_and_issues”find out some-more inform here/a upon how to inform the bug./p
pstrongActive members of the Joomla Bug Squad during this final recover cycle include:/strong Ian MacLennan as well as Mark Dexter co-coordinators; Airton Torres, Akarawuth Tamrareang, Arno Zijlstra, Amy Stephen, Andrew Eddie, Anthony Ferrara, Ashwin Date, Dan Walker, Dennis Hermacki, Edvard Ananyan, Elin Waring, Ercan Ozkaya, Gerg? Erd?si, Hannes Papenberg, Kevin Devine, Kevin Sookocheff, Klas Berli?, Marieke outpost der Tuin, Marijke Stuivenberg, Mati Kochen, Niels Braczek, Pete Nurse, Rosario Buste, Samuel Moffatt, Shantanu Bala, as well as Wilco Jansen./p
pstrongA comfortable acquire to the newest members of the Joomla Bug Squad:/strong Amit Kumar Singh, Andrew Rose, Ashwin Date, Edvard Ananyan, Joe Palmer, Kashyap Puranik, Niels Braczek, Parth Lawate, Pete Nurse, Philip Walton, Richard Malinowski, as well as Srinivas Chilukuri./p
pa rel=’nofollow’ href=”http://feedads.googleadservices.com/~a/pZt94ehYDOlhje35DrawmhR1psw/a”img src=”http://feedads.googleadservices.com/~a/pZt94ehYDOlhje35DrawmhR1psw/i” border=”0″ ismap=”true”/img/a/pdiv class=”feedflare”
a rel=’nofollow’ href=”http://feeds2.feedburner.com/~ff/JoomlaAnnouncements?a=Eodb7FGsCao:92bAZq80M5c:yIl2AUoC8zA”img src=”http://feeds2.feedburner.com/~ff/JoomlaAnnouncements?d=yIl2AUoC8zA” border=”0″/img/a the rel=’nofollow’ href=”http://feeds2.feedburner.com/~ff/JoomlaAnnouncements?a=Eodb7FGsCao:92bAZq80M5c:V_sGLiPBpWU”img src=”http://feeds2.feedburner.com/~ff/JoomlaAnnouncements?i=Eodb7FGsCao:92bAZq80M5c:V_sGLiPBpWU” border=”0″/img/a
/div