Joomla!

Flexible
Simple
Elegant
Customizable
Powerful

Cutting Edge Content Management

Joomla! is one of the most powerful Open Source Content Management Systems on the planet. It is used all over the world for everything from simple websites to complex corporate applications. Joomla! is easy to install, simple to manage, and reliable.

Main Menu

Joomla! 1.0.x

Joomla! 1.5

Joomla! events

The Joomla! Shop presents to you a large collection of Joomla! books, as well as computer and Internet books. Purchase books in your language. This is a great way to support Joomla!

Who's Online

Upgrade to Joomla! 1.0.4 Security Release now!

Monday, 21 November 2005

Joomla! 1.0.4 out now!

Joomla! 1.0.4 [ Sundial ] is now available on the forge for download here. This is a Security Release, which means it contains fixes for six Security Vulnerabilities. We highly recommend that you upgrade to this version.

1.0.4 is available as a Full Package, which contains all Joomla! files and a Patch Package which contains only the files that have been changed by the Security work conducted.

1.0.4 Changelog
1.0.4 Version Information

Security Vunerabilities

1.0.4 Contains fixes for 6 Security Vunerabilities.

Critical Level Threats

Potentional XSS injection through GET and other variables
- Affects all previous versions of Joomla! and Mambo 4.5.2.3
Hardened SEF against XSS injection
- Affects all previous versions of Joomla! and Mambo 4.5.2.3

Low Level Threats

Potential SQL injection in Polls modules through the Itemid variable
- Affects all previous versions of Joomla! and Mambo 4.5.2.x series
Potential SQL injection in several methods in mosDBTable class
- Affects all previous versions of Joomla! and Mambo 4.5.2.x series
Potential misuse of Media component file management functions
- Affects all previous versions of Joomla! and Mambo 4.5.2.x series
Add search limit param (default of 50) to `Search` Mambots to prevent search flooding
- Affects all previous versions of Joomla! and Mambo 4.5.2.x series

Upgrade Instructions

To update from Joomla! 1.0.3, all you have to do is simply overwrite files from the 1.0.3 to 1.0.4 Patch Package
To update from Joomla! 1.0.2, all you have to do is simply overwrite files from the 1.0.2 to 1.0.4 Patch Package
To update from Joomla! 1.0.1, all you have to do is simply overwrite files from the 1.0.1 to 1.0.4 Patch Package
To update from Joomla! 1.0.0, all you have to do is simply overwrite files from the 1.0.0 to 1.0.4 Patch Package

Conversion Instructions

For those converting from Mambo 4.5.2.x please read these Migration instructions. You need to download the Joomla 1.0.4 Full package

Thank you to the community for their continued assistance in helping us make Joomla 1.0.x more stable.

Rey Gigataras [stingrey]
Joomla! Software Coding and Design
Stability Team Leader

< Prev		Next >

[ Back ]