Joomla! 2.5.8 Released

The Joomla Project is pleased to announce the immediate availability of Joomla 2.5.8. This is a security release. The Production Leadership Team's goal is to continue to provide regular, frequent updates to the Joomla community. Learn more about Joomla! development at the Developer Network.

The update process is very simple, and complete instructions are available here. Note that there are now easier and better ways of updating than copying the files with FTP.


New Installations: Click here to download Joomla 2.5.8 (Full package) »

Update Package: Click here to download Joomla 2.5.8 (Update package) »

Note: Please read the update instructions before updating.


Want to test drive Joomla? Try the online demo. Documentation is available for beginners.

Please note that you should always backup your site before upgrading.

Release Notes

Check the Joomla 2.5.8 Post-Release FAQs to see if there are important items and helpful hints discovered after the release.

Statistics for the 2.5.8 release period

  • Joomla 2.5.8 contains:
    • 1 Security issue fixed
    • 9 tracker issues fixed

Security Issues Fixed

  • Medium Priority - Core - Clickjacking Vulnerability.

Tracker Issues Fixed

29575 Article Manager excludes identity of author
29574 Backport JAccess fixes from platform. Thanks Elin
29401 Repeated htmlspecialchars() Applied When Multiple Breadcrumbs Active. Thanks Peter and Roland
29264 Field "alias" disappears in menu manager with type "External URL". Thanks Roberto
29488 Missing JText In Language Installer
29463 Notice in language manager when FTP layer is enabled.
28764 user notes category is not properly nested in the assets table. Thanks Peter
28849 Publishing date instead of creation date in com_content/category/view.feed.php. Thanks Tobias Ribizel.
28297 com_banners: BannersModelClients SQL error (group by banner id). Thanks Nils

Joomla! Bug Squad

Thanks to the Joomla Bug Squad for their dedicated efforts investigating reports, fixing problems, and applying patches to Joomla. If you find a bug in Joomla, please report it on the Joomla! CMS Issue Tracker.

Active members of the Joomla Bug Squad during past 3 months include: Akarawuth Tamrareang, Andrea Tarr, Angelika Reisiger, Bill Richardson, Brian Teeman, Constantin Romankiewicz, Daria Mikhailova, Dean Clarke, Dennis Hermacki, Elin Waring, Emerson Rocha Luiz, Harald Leithner, Ian Galpin, Itamar Elharar, Jacob Waisner, James Brice, Jan Kuchař, Janich Rasmussen, Jean-Marie Simonet, Jonathan M. Cameron, Kevin Griffiths, Marijke Stuivenberg, Mark Dexter, Mark Lee, Matt Thomas, Michael Babker, Nicholas K. Dionysopoulos, Nick Savov, Nikolai Plath, Ofer Cohen, Peter van Westen, Peter Wiseman, Prasit Gebsaap, Radek Suski, Rob Clayburn, Rob Joyce, Roberto Segura, Roland Dalmulder , Rouven Weßling, Sam Moffatt, Shaun Maunder, Soheil Novinfard, Tessa Mero, Tim Plummer, Troy Thomas Hall, Viet Vu.

Bug Squad Leadership: Mark Dexter, Coordinator.

Joomla! Security Strike Team

A big thanks to the Joomla! Security Strike Team for their ongoing work to keep Joomla secure. Members include: Airton Torres, Alan Langford, Bill Richardson, Elin Waring, Gary Brooks, Jason Kendall, Jean-Marie Simonet, Jeremy Wilken, Marijke Stuivenberg, Mark Dexter, Michael Babker, Rouven Weßling, Samuel Moffatt.