Joomla! security release

Following on from the release of Joomla! 1.5.1 [Seenu], we are pleased to announce the immediate release of Joomla! 1.0.14 [Daybreak]. This version has been triggered by reported cross site scripting problems that could occur under the right circumstances. We have also addressed many other general bugs and problems as well.

This release addresses serious security vulnerabilities and you should proceed with testing on a backup copy of your site. Once you have verified that your site works as expected, we recommend upgrade your live site as soon as possible.

Joomla! 1.5.1 Released

The Joomla! community is pleased to announce the immediate availability of Joomla! 1.5.1 [Seenu]. Since the stable release of Joomla! 1.5 we have seen huge numbers of downloads which has helped to push the total number of downloads to over 3 million in less than a year.

We have found in one of the new features of Joomla! 1.5, an XML-RPC Blogger API plugin, a high priority security vulnerability. While this feature is disabled by default on every Joomla! 1.5 install and would have to be manually enabled for the vulnerability to exist, we strongly recommend that all Joomla! 1.5 users upgrade to Joomla! 1.5.1.

Thanks to the work done by both the Joomla! Bug Squad as well as the Development Team , not only has this vulnerability been patched but so have several other smaller issues.

Joomla! 1.5 Released

It is with great pride that the Joomla! community announces to the world the immediate availability of Joomla! 1.5 Stable [Khepri]. As a community of contributors, we have been through celebrations and tribulations. We have had fun, and we have worked hard. We have learned from and helped one another. What started two and a half years ago with a letter to the community has grown into a great opportunity for both the Joomla! project and community to benefit from these efforts and to consider our future.

Joomla! Site Administrator

Site Administrators - Simplicity & Control

At first glance, you will appreciate user interface improvements. The Joomla! 1.5 Administrator is more refined and the main menu simplified. The global configuration was substantially reworked for simpler presentation and greater control. [9] An important improvement for our international community is having Joomla!'s entire Administrator available in one's own language using language packs made available at joomlacode.org.

Joomla! administrators will find a number of improvements in ease of site management. A single installer is available for all extension types, including languages. [5] The media manager is improved visually and functionally. Images, documents, presentations, and more, can now be stored. Other improvements include multi-delete capability, batch file uploads, and an ability to view media in icon and list formats. [4]

Help Test Joomla! 1.0.14

The Joomla! Project today announced the immediate release of Joomla! 1.0.14 RC1 [Daybreak], the first and hopefully singular release candidate for the 1.0.14 release cycle. Several security issues have been discovered and addressed for this release. While the required changes are not significant, the number of impacted files are significant and we need your help. Before this release is declared stable we need to ensure that it works as well for you as it does for us.

Those of you that are able and willing please download a copy of 1.0.14 RC1 and test it on a backup copy of your live site. Make sure that the system works as good or better than Joomla! 1.0.13, our current stable release. Any issues that you find please report in the 1.0.x Bug Tracker. If you have questions on how to report a bug you should read the how-to and then if you still have questions please feel free to ask them in our 1.0.x Quality and Testing forum.

Since this release fixes security vulnerabilities, once you have verified on a backup of your site that everything works as expected we suggest that you upgrade your live site to this release.

SiteLock