The Joomla Project announces the immediate availability of Joomla 1.5.9 [Vatani]. This is a security release and users are strongly encouraged to upgrade immediately.
Check the Joomla 1.5.9 Post-Release Notes to see if there are important items and helpful hints discovered after the release.
Security
One low-level and one high-level security issue were fixed in this release:
High Priority: Directory Traversal. A crafted request can allow an attacker to view directory trees on the server. Note: contents of files cannot be edited or deleted, just viewed. More information »
Low Priority: SSL Session Token Disclosure. When running a site as SSL ONLY, if a non-SSL request is made, an attacker can obtain the session token. There is NO risk for Web sites that use both HTTP and HTTPS. More information »
Fixed Contact Page so that a blank page is not displayed when vCard is not enabled, but is selected in the Contact Parameters (10680)
Resolved problem with Category View Table where filter did not work when cache was enabled (10840)
vCard no longer displays excess spaces (11871)
Small change in components/com_banners/models/banner.php (12577)
Resolved invalid XHTML 1.0 Transitional issues introduced in 1.5.7 for the Contact form (12868)
Fixed problem that resulted in erroneous '404 - Contact not found' page for dropdown in Contact View (12989)
Fixed Contact Category URL problems (13045)
Fulltext Search for Uncategorized and Archived Articles is now working (13490)
onPrepareContent issue for non-com_content Components resulting in a warning message has been resolved (13505)
'Change Contact Details' link now loads correct page (13542)
Contact image not displaying in front end (13643)
Front-end article submission no longer auto-populates, finish publishing date with same date as start publishing (13673)
Media Manager Javascript error: "Object doesn't support this property or method" that presented for IE has been fixed (13761)
Space between meta keywords no longer removed when saving Articles (13794)
com_installer Module View now correctly displays Author e-mail and URL (13942)
Robots and Author meta retained when copying Articles (13949)
Article Archive pagination fixed (14070)
Correction so that unregistered site visitors can no longer access PDF for registered Articles (14196)
Hits filter in Category List fixed (14390)
Resolved problem where "Register to read more" incorrectly redirected to Front Page, rather than Article (14392)
Poll error message resolved (14394)
Resolved problem where Category List failed to retain Column Sort preference when navigating to a different page (14398)
Resolved problem in Category List where changing Display # to All in page 2 of list would display no results (12932)
Category List now correctly shows filtering option in use (14402)
Corrected 404 error that resulted when menu access was set to Public and Contact Item is Registered (14412)
Modules
New modules can now be added, even when there are no modules entries already defined (11874)
Inconsistency removed for Login/Logout Redirection page of mod_login (13611)
JMenu getMenu() doc error corrected (13617)
Archive Module Count Parameter and Tool Tip corrections (13694)
STRPOS error corrected when editing Alias Menu Item (13909)
Toolbar Image now points to an existing image (14171)
Plugins
OpenID upgraded to 2.0 protocol, now works with Yahoo (12217)
plgSystemCache plugin now respect site and page language (12115)
Page string in plugins/content/pagebreak.php is now properly externalized (12730)
Legacy Plugin - Login Timeout resolved (13662)
Access level for Plugins fixed (14106)
Fixed OpenID Transition issues (14433)
Legacy
No issues fixed for this release
Templates
RTL feeds PARAM is now saved in database which corrects RTL feeds in Milkyway and Beez (11235)
CSS and XHTML valid error in JA_Purity resolved, as was invalid CSS validator link (12887)
JA_Purity default status for Modules defined for right position now collapse correctly, when unused (12925)
Fixed CSS errors in rhuk_milkyway/css/template_rtl.css (13517)
Missing H1 text-align in rhuk_milkyway/css/template_rtl.css fixed (13570)
Beez template override for com_search now displays error messages correctly (13584)
Corrected Last Updated date for Beez Template (13632)
Resolved inconsistencies for Beez Template Override Page Titles (13634)
Contact image changes for Beez override (13700)
Incorrect File Reference corrected for Beez Template (13859)
Short PHP Notation in Beez Windows hosting bug introduced in 12798 has been fixed (14313)
en-GB.com_statistics.ini are now correctly deleted (14391)
Removed unnecessary string in JA_Purity template (14414)
Removed unnecessary strings in rhuk_Milkyway template (14415)
Language
Language INI files that were incorrectly encoded using UTF-8 with BOM have been fixed (13499)
Untranslated strings in en-GB.ini after SVN 11236 are fixed (13514)
Fixed untranslated strings in com_weblinks (13608)
Fixed untranslated strings in com_contact (13626)
Fixed untranslated Strings in admin/mod_feed (13666)
Spacer values are now translatable (14308)
Fixed issue with JA_Purity spacer so that it is now translatable (14360)
Resolved remaining English string hard-coded in mod_search (14374)
String missing in en-GB.com_installer.ini (14389)
Resolved untranslated language string for "Email a Friend" feature (14395)
Tooltip language string in com_config corrected (13633)
Administrator
Added better tooltip text for the Help Server Reset button in Global Configuration System Settings (12023)
Toolbar & value fixed for Media Manager button (12841)
JInstallerHelper Class Function description has been corrected (13574)
Help screens made (13616)
Remove default filter for Super Admininistrator and fix filter whitelist problem (13770)
Corrected error where Editor deleted content for default filter; UTF-8 compatibility is now enforced with JInputFilter (13901)
Removed old dev.joomla.org links (14227)
System
query_batch corrected for SQL error (12247)
uri.php changes made in 1.5.7 no longer break back-end URLs if $live_site=Http has an uppercase H (12812)
JFolder::delete bug fixed when folder contain symbolic links on folders (12939)
Typo in sample_data.sql resolved (13549)
License correction for PHPMailer in CREDITS.php (13811)
Fixed error that resulted from invoking JDatabase::Query() more than once (13860)
Cache space is now correctly released (14317)
String bug for strspn() resolved (14339)
Weird characters removed from LICENSES.php file (14408)
Removed outdated link in the installer language file (14410)
Fixed typo in Cache Manager (14434)
Updated Archive_Tar to relicensed BSD version (12746)
Statistics
Statistics for the 1.5.9 release period:
Joomla 1.5.9 contains:
81 issues fixed in SVN
55 commits
Tracker activity resulted in a net decrease of 1 active issue:
169 new reports
92 closed
81 fixed in SVN
At the time the 1.5.9 release was packaged, the tracker had 113 active issues:
63 open
47 confirmed
3 pending
Joomla! Bug Squad
Thanks to the Joomla Bug Squad for their dedicated efforts investigating reports, fixing problems, and applying patches to Joomla. If you find a bug with Joomla, find out more information here on how to report the bug.
Active members of the Joomla Bug Squad during this last release cycle include: Ian MacLennan and Mark Dexter co-coordinators; Airton Torres, Arno Zijlstra, Akarawuth Tamrareang, Alan Langford, Anthony Ferrara, Amy Stephen, Andrew Eddie, Eduardo Diaz, Elin Waring, Ercan Ozkaya, Gergo Erdosi, Hannes Papenberg, Kevin Devine, Marijke Stuivenberg, Mickael Maison, Robin Muilwijk, Samuel Moffatt, Shantanu Bala, Tibor Toth, and Wilco Jansen.
A warm welcome to the newest members of the Joomla Bug Squad: Joe Sonne, Klas Berlič, and Mithun Kumar.
In yet another step to lowering the barriers to contributing to the Joomla Project, we are pleased to announce our new Translation and Localization Policy. Our existing Translation Teams worked together with OSM to refine and update to the process to encourage contributors, foster collaboration, and maintain the spirit of the open source community. Jean-Marie Simonet from the Translations Working Group has a blog post detailing the changes in our translation and localization efforts.
Currently supporting over 60 world languages, the Joomla Project is looking forward bringing Joomla to even more users all over the globe. If you want to find out more about translations or find Joomla in your language, visit the Translations section of the Joomla Community Portal.
There are a variety of categories: classification & taxonomy; collaboration; content commerce; content creation, production, & digital publishing; content delivery; content management; content security; fee-based info services; intranets & portals; mobile content; search engines & technologies; and social media.
EContent said, "We are proud of this list and of the companies on it. Members of the EContent 100 List are the companies empowering the content that fuels business today. We hope that our readers find the list as valuable as we did the process of creating it." The Joomla Project is honored to be recognized as a high-calibre business solution.
The Joomla Project is pleased to announce the immediate availability of Joomla 1.5.8 [Wohnaiki]. This release contains a number of bug fixes and two moderate-level security fixes. It has been around two months since Joomla 1.5.7 was released on September 9, 2008. The Development Working Group's goal is to continue to provide regular, frequent updates to the Joomla community.
Articles: Remove brackets around Last Updated date and time, Start Publishing date corrections for other than UTC 00:00, hit counts correct for Articles, adding a space after a cloaked email address
E-mail addresses: Correctly cloaked when presented in Section and Category descriptions
Categories: Edit icon correctly shows for Articles without Title links, Print icon correct now on first page for Blog Layout
Sections: Plural and singular form correction, Category link properly ended, Router changes reverted to version 1.5.6 so Article ID does not append to the Article slug
Frontpage: Article assignment correction, corrected number of Links
Contacts: Image display correction when Image Directory is configured
RSS Feed: Corrected spelling of Category in Category feed
User: Added isInternal checking on referer values
Weblinks: Language strings
Modules
Feed: Target attribute validation, language string correction
Login: ItemID is preserved on redirect
Menu: Changing Menu Link Type now functions properly, Section Language string, Article Reset button working
Related Items: Keyword matching functions correctly and filters characters appropriately
Stats: Corrected Time
Sections: No authorization parameter works correctly
Search: Form validates correctly for Transitional xHTML
Legacy
Return statement added for Legacy Menu Check
Templates
Beez: Lengthened E-mail Content Popup, Search button now works when pressed, password reset works correctly, corrections to Beez HTML folders, User details page corrected
JA_Purity: Added missing language strings
Administrator
Console: Added "Welcome to Joomla!" information and Joomla Security RSS feeds to Administrator Console
Installation: Proper deletion of component directories, default entries for Templates and Languages are now correct for uninstall
Media Manager: Changed default for new sites to disable Flash multi-file uploader due to incompatibility with Flash 10
Installation: Remove confusing error message about language files for extension installations, Administrator Modules now correctly uninstall INI files
Sample data: Updated news feeds to point to free software community sites, extensive corrections and updates to sample content
System
API: JFolder::files and JFolder::folders corrections for Search, missing Method added to JRecordSet, Database Class correctly quotes names not using dot notation, JTableUser matches using the correct number of fields
Cache: Correct undefined variable in Cache Class
Language file: Corrected wording, correct installation of PDF fonts independent of language choices, several language string corrections in en-GB.ini
Menu: Performance improvements for sites with many menu items
Users: Temporary Users are now able to logout, secure protocol can now be used when editing account details
Added PHP 4 compatibility for isInternal checking
Statistics
Statistics for the 1.5.8 release period:
Joomla 1.5.8 contains:
71 issues fixed in SVN
26 commits
Tracker activity resulted in a net decrease of 4 active issues:
65 new reports
130 closed
66 fixed in SVN
At the time the 1.5.8 release was packaged, the tracker had 114 active issues:
44 open
44 confirmed
24 pending
Joomla! Bug Squad
Thanks to the Joomla Bug Squad for their dedicated efforts investigating reports, fixing problems, and applying patches to Joomla. If you find a bug with Joomla, find out more information here on how to report the bug.
Active members of the Joomla Bug Squad during this last release cycle include: Ian MacLennan and Mark Dexter co-leads; Airton Torres, Arno Zijlstra, Akarawuth Tamrareang, Alan Langford, Anthony Ferrara, Amy Stephen, Andrew Eddie, Elin Waring, Ercan Ozkaya, Charl van Niekerk, Gergo Erdosi, Hannes Papenberg, Jennifer Marriott, Jens-Christian Skibakk, Jonah Braun, Joseph LeBlanc, Kevin Devine, Marijke Stuivenberg, Mati Kochen, Mickael Maison, Robin Muilwijk, Samuel Moffatt, Shantanu Bala, Toby Patterson, and Wilco Jansen.
A warm welcome to the newest members of the Joomla Bug Squad: Dan Walker, Eduardo Diaz, and Tibor Toth.
Each year Packt Publishing opens the voting booths for users everywhere to cast votes for the best content management system. There are a number of very qualified contenders in each of the categories including CMS Made Simple, Plone, and Drupal. This year, Joomla took the runner-up prize in the categories of Best Overall Open Source CMS Award and the Best PHP Open Source CMS (tied with CMS Made Simple). This results in a total prize winnings of $3500 to the Joomla Project.
Even though Joomla has taken home several Packt Awards in the past, Joomla Core Team member Andrew Eddie asserted, "This has made me more determined to do better next year."
Also, Joomla developer Johan Janssens was awarded the Open Source MVP 2008 prize, a new category in this year's awards, for his outstanding contributions to Joomla.
We at the Joomla Project would like to thank all of our wonderful users to voting for us and a big congratulations goes to Drupal for taking first place in the Best Overall Open Source CMS Award category. We also want to congratulate all the other winners.
Joomla Core Team member Brad Baker summed it up, "The future is bright for open source content management systems like Drupal and Joomla, whichever you use."
