Joomla! Changelog

What's new in Joomla! 3.9.14

Dec 18, 2019
  • Security Issues Fixed:
  • Low Priority - Core - Path Disclosure in framework files (affecting Joomla 3.8.0 through 3.9.13(
  • Low Priority - Core - Various SQL injections through configuration parameters (affecting Joomla 2.5.0 through 3.9.13)
  • Bug fixes and Improvements:
  • Improve PHP 7.4 compatibility #27190 #27219
  • Fix incorrect id generated for input fields in repetable subform #27081
  • Fix Sample Data Learn #27100 #27101 #27102
  • Allow JSON Document caching #27161
  • Avoid errors when Joomla! gets outdated #27197
  • Show full video filename and preview icon in Media Manager #27230

New in Joomla! 3.9.13 (Nov 6, 2019)

  • Security Issues Fixed:
  • Low Priority - Core - CSRF in com_template overrides view (affecting Joomla 3.2.0 through 3.9.12)
  • Low Priority - Core - Path Disclosure in phpuft8 mapping files (affecting Joomla 3.6.0 through 3.9.12)
  • Bug fixes and Improvements:
  • Improve PHP 7.4 compatibility #25801 #25782 #26615 #26865
  • Improve reverse proxy support #25520
  • Fix active category detection #26330
  • Fix message filtering #26065
  • Improve sending mass mail #26844

New in Joomla! 3.9.12 (Sep 27, 2019)

  • Fix for minyear and maxyear in the calendar #26119
  • Handle Google Font weights and styles in Protostar #25976
  • Fix user session on mssql server #23213
  • Protect SQL servers by adding pause mechanism to cli finder indexer #13502
  • Fix Imagelist custom field default image #26352

New in Joomla! 3.9.10 (Jul 12, 2019)

  • Joomla 3.9.10 is fixing one bug introduced into Joomla 3.9.9 which affects the template styles of multilingual sites and results in lost data.

New in Joomla! 3.9.6 (May 13, 2019)

  • Security Issues Fixed:
  • Low Priority - Core - XSS in com_users ACL debug views (affecting Joomla 1.7.0 through 3.9.5)
  • Low Priority - Core - By-passing protection of Phar Stream Wrapper Interceptor (affecting Joomla 3.9.3 through 3.9.5)
  • Bug fixes and Improvements:
  • Media Manager: Fix logic in file upload check introduced in 3.9.5 #24637
  • Edge Chromium support added #24379
  • User Notes: Fix date format #24529
  • Frontend editing: article category editable by Publishers and up #24640
  • Cache: Cache folder automatically created if it doesn’t exist #21952
  • PostgreSQL database improvements #24682 #24683 #24652

New in Joomla! 3.9.5 (Apr 16, 2019)

  • Security Issues Fixed:
  • Low Priority - Core - Directory Traversal in com_media (affecting Joomla 1.5.0 through 3.9.4)
  • High Priority - Core - Helpsites refresh endpoint callable for unauthenticated users (affecting Joomla 3.2.0 through 3.9.4)
  • Moderate Priority - Core - Object.prototype pollution in JQuery $.extend (affecting Joomla 3.0.0 through 3.9.4)
  • Bug fixes and Improvements:
  • User Password: Add minimum lowercase rule for password validation #24230
  • Associations tab: Fix wrong behaviour of Indonesian language #24244
  • Debug language: Fix User Actions Log Manager #24178
  • New installation language: Kazakh #24233
  • Google Authenticator plugin (2FA): QR-code generator implemented #24255

New in Joomla! 3.9.4 (Mar 19, 2019)

  • Security Issues Fixed:
  • High Priority - Core - Missing ACL check in sample data plugins (affecting Joomla 3.8.0 through 3.9.3)
  • Low Priority - Core - XSS in com_config JSON handler (affecting Joomla 3.2.0 through 3.9.3)
  • Low Priority - Core - XSS in item_title layout (affecting Joomla 3.0.0 through 3.9.3)
  • Low Priority - Core - XSS in media form field (affecting Joomla 3.0.0 through 3.9.3)
  • Bug fixes and Improvements:
  • User Terms (#23787) and Privacy Consent (#23660) plugins: Layouts for the label and message added
  • Featured articles: Page subheading added #23583
  • Custom formfield layout paths simplified #22645
  • Com_contact: Contact name field moved out of the Contact Information block #23563
  • Custom module: Improvement of the frontend editing #23741
  • Action Logs improvement: Cache (#22739) and Purge/Export (#22740) actions are now logged

New in Joomla! 3.9.3 (Feb 13, 2019)

  • Security Issues Fixed:
  • Low Priority - Core - Lack of URL filtering in various core components (affecting Joomla 2.5.0 through 3.9.2)
  • Low Priority - Core - Browserside mime-type sniffing causes XSS attack vectors (affecting Joomla 1.0.0 through 3.9.2)
  • Low Priority - Core - Additional warning in the Global Configuration textfilter settings (affecting Joomla 2.5.0 through 3.9.2)
  • Low Priority - Core - Stored XSS issue in the Global Configuration help url #2 (affecting Joomla 2.5.0 through 3.9.2)
  • Low Priority - Core - XSS Issue in core.js writeDynaList (affecting Joomla 2.5.0 through 3.9.2)
  • Low Priority - Core - Implement the TYPO3 PHAR stream wrapper (affecting Joomla 2.5.0 through 3.9.2)
  • Bug fixes and Improvements:
  • Prevent renaming/deleting the template index.php file #23654
  • Smart Search improvement #23736
  • Contacts banned fields removed #23585
  • Improvement of the Integration tab display #23711
  • Fix the category filter for featured articles #23454
  • Fix for the Template Style field in the menu manager #23556
  • Breadcrumbs for tags #23599

New in Joomla! 3.9.2 (Jan 16, 2019)

  • Security Issues Fixed:
  • Low Priority - Core - Stored XSS in mod_banners (affecting Joomla 2.5.0 through 3.9.1)
  • Low Priority - Core - Stored XSS in com_contact (affecting Joomla 2.5.0 through 3.9.1)
  • Low Priority - Core - Stored XSS issue in the Global Configuration textfilter settings (affecting Joomla 2.5.0 through 3.9.1)
  • Low Priority - Core - Stored XSS issue in the Global Configuration help url (affecting Joomla 2.5.0 through 3.9.1)
  • Bug fixes and Improvements:
  • Fixes for states in com_finder (#23194), com_banners (#23193), com_messages (#23192), com_users notes (#23191)
  • Removal of the Caching field in the languages (#23174), syndicate (#23166), random image (#23165), and login modules (#23152)
  • Editors API extended #23224
  • Menu Item Alias type: Redirection is optional #23278
  • com_media: Normalisation of uploaded file names (#23259)
  • Code cleanup and namespacing

New in Joomla! 3.9.1 (Nov 28, 2018)

  • Fix for the automatic title option of the Latest Actions admin module #22925
  • Com_privacy: Redirected to the privacy request form after login #22927
  • Update to TinyMCE 4.5.9 #22879
  • Performance improvement for the category and tag managers #22117
  • Fix for the delete module positions issue #22935
  • Preventing the System Privacy Consent plugin from running when logging out through a menu item #22939
  • Content - Page Break plugin: Possibility to use a template override for Previous/Next pagination #22932
  • Fix navigation to the first page in pagination when SEF is off #23042
  • System - User Actions Log plugin: Removal of the number of days limitation #23084

New in Joomla! 3.9 (Oct 31, 2018)

  • The Privacy Tool Suite by Joomla:
  • User Consents - Make light work of data privacy requirements:
  • Need users to consent to your privacy policy and/or terms and conditions? With Joomla 3.9, it’s all handled automatically. Simply and easily set up your core forms to request consent before collecting any personal data.
  • You can also set up a time-based privacy consent expiration. The system will let you know if and when you need to contact your users to renew consent.
  • Track user consents, manage site policy changes and much more besides, all with a glance at your dashboard.
  • User information requests? Easy-peasy:
  • Track and manage information access or removal requests from your users, seamlessly. Once a request is made, just log in, export their data and/or remove them.
  • User data removal requests are all handled automatically, with all personal data anonymized without you needing to lift a finger.
  • Never forget a request again. Just set Joomla 3.9 to remind you.
  • Extension Capabilities - Put your users in the picture when it comes to privacy:
  • Extension developer – give your potential users a helping hand, by making it clear what data your extension collects. When you want to report functionality in your extensions that may need privacy consideration, simply use the new Plugin Event (onPrivacyCollectAdminCapabilities).
  • With this simple action, your users gain a clear understanding of your extension, and whether they’ll need to amend their own documentation, such as their privacy policy or terms of service.
  • User Actions Log - Know who’s done what, and when:
  • Want to know what administrative actions have been performed on your site? Thanks to Joomla 3.9, Super Users can easily see which user did what, and when. And it also works with supported extensions! Review the action log, export it and purge the entries. You’ll never miss a trick, thanks to the latest actions module that can be added to your control panel.
  • Need more? Then enable the new log rotation plugin – this will allow you to rotate and remove your log files.
  • Joomla 3.9 is about more than Privacy:
  • Content management made fast and easy – little features, that make a big difference:
  • Add notes to your articles in the backend, and filter them #19134
  • A new search feature in the backend: search for a specific article content #20083
  • Load a module by ID into your article #19362
  • More flexibility for custom fields with two new options:
  • A repeatable custom field is now available #20243
  • Create alternative layouts to fit your needs #18571
  • Most recent frontend changes:
  • Display the intro or full image in your newsflash module #20169
  • Show only the articles from a specific author in your latest articles module (#20687), and more options!
  • New features for multilingual sites:
  • A new toolbar button to edit associations #21022
  • Propagate existing associations #21321
  • Display your tags per language #19509
  • Use Google Invisible reCAPTCHA on your websites #18146
  • Argon2id Password is now supported #20855

New in Joomla! 3.8.13 (Oct 10, 2018)

  • Low Priority - Core - Hardening com_contact contact form (affecting Joomla 2.5.0 through 3.8.12)
  • Low Priority - Core - Inadequate default access level for com_joomlaupdate (affecting Joomla 2.5.4 through 3.8.12)
  • Low Priority - Core - Access level Violation in com_tags (affecting Joomla 3.1.0 through 3.8.12)
  • Low Priority - Core - ACL Violation in com_users for the admin verification (affecting Joomla 1.5.0 through 3.8.12)
  • Low Priority - Core - CSRF hardening in com_installer (affecting Joomla 2.5.0 through 3.8.12)

New in Joomla! 3.8.12 (Aug 28, 2018)

  • Security Issues Fixed:
  • Low Priority - Core - Hardening the InputFilter for phar stubs (affecting Joomla 1.5.0 through 3.8.11)
  • Low Priority - Core - Stored XSS vulnerability in the frontend profile (affecting Joomla 1.5.0 through 3.8.11)
  • Low Priority - Core - ACL Violation in custom fields (affecting Joomla 3.7.0 through 3.8.11)
  • Bug fixes and Improvements:
  • mod_articles_latest and mod_articles_news: fix to show featured articles #21336
  • Tags in com_content: fix to display tags when other item info are set to hidden #21275
  • com_tags: All Tags default layout #21031
  • Allows filtering by the archived state in the redirect component #21673

New in Joomla! 3.8.11 (Aug 2, 2018)

  • Fix for the Missing "Select Type" field in the Extensions Manager #20881
  • Replace the URL parameter "limitstart=0" by "start=0" when SEF is enabled #19452
  • Remove non callable array items from field categories #20093
  • Articles - Category Module: New ‘showon’ attribute for form fields #20950
  • Fix OpenSearch implementation #20937
  • Fix for tag filtering in Featured Articles view in administrator #21138
  • Fix for filtering Featured Articles by access level in administrator #21168
  • Media manager: relative paths for video files #21156
  • Com_menus: removal of useglobal attribute #21095
  • Multilingual Associations Component: fix associations in sidebyside view for contact and newsfeeds #21180

New in Joomla! 3.8.10 (Jun 29, 2018)

  • This release is fixing the autoloader for Windows platforms. If you are using a Windows platform, please update your site to 3.8.10 as soon as possible.

New in Joomla! 3.8.8 (May 23, 2018)

  • Security Issues Fixed:
  • Low Priority - Core - ACL violation in access levels (affecting Joomla 2.5.0 through 3.8.7)
  • Low Priority - Core - Add phar files to the upload blacklist (affecting Joomla 2.5.0 through 3.8.7)
  • Moderate Priority - Core - Information Disclosure about unpublished tags (affecting Joomla 3.1.0 through 3.8.7)
  • Low Priority - Core - Installer leaks plain text password to local user (affecting Joomla 3.0.0 through 3.8.7)
  • Moderate Priority - Core - XSS Vulnerabilities & additional hardening (affecting Joomla 3.0.0 through 3.8.7)
  • Low Priority - Core - Filter field in com_fields allows remote code execution (affecting Joomla 3.7.0 through 3.8.7)
  • Low Priority - Core - Session deletion race condition (affecting Joomla 3.0.0 through 3.8.7)
  • Low Priority - Core - Possible XSS attack in the redirect method (affecting Joomla 3.2.1 through 3.8.7)
  • Low Priority - Core - XSS vulnerability in the media manager (affecting Joomla 1.5.0 through 3.8.7)
  • Bug fixes and Improvements:
  • Miscellaneous accessibility improvements for the Backend
  • Updated CodeMirror to 5.37 and various improvements #20269 #19833 #12542
  • Improved handling of numeric user group names #20091
  • [com_content] Filter by no author #20245
  • Added support for PHP 7.3’s is_countable function #20441
  • Sending passwords by email disabled by default for new installs #20247

New in Joomla! 3.8.6 (Mar 14, 2018)

  • Security Issues Fixed:
  • Low Priority - Core - SQLi vulnerability in User Notes (affecting Joomla 3.5.0 through 3.8.5)
  • Bug fixes and Improvements:
  • Various session management improvements #19548, #19687
  • Multilingual: Associated categories should display only when published #19551
  • Improve performance of the com_content category view with filter by tags #19284
  • [com_fields] Fields are not copied when batch duplicating an article #16958
  • Pass the configuration tmp_path to the archive package for extension installations #19608
  • Hide global configuration and system information from non super users #19697
  • Language overrides do not find plugin language files when files are in the plugin language folder #19740
  • reCAPTCHA V1 - Discontinued #19648
  • Delete existing user_keys, if password is changed #17827
  • PHP 7.2 compatibility fixes

New in Joomla! 3.8.5 (Feb 19, 2018)

  • This release addresses regressions reported after the release of Joomla 3.8.4, including the revert of routing changes applied in Joomla 3.8.4 and broken syntax highlighting in the CodeMirror editor.

New in Joomla! 3.8.4 (Jan 31, 2018)

  • Security Issues Fixed:
  • Low Priority - Core - XSS vulnerability in module chromes (affecting Joomla 3.0.0 through 3.8.3)
  • Low Priority - Core - XSS vulnerability in com_fields (affecting Joomla 3.7.0 through 3.8.3)
  • Low Priority - Core - XSS vulnerability in Uri class (affecting Joomla 1.5.0 through 3.8.3)
  • Low Priority - Core - SQLi vulnerability in Hathor postinstall message (affecting Joomla 3.7.0 through 3.8.3)
  • Bug Fixes and Improvements:
  • Contact form loses data after submission with error #17743
  • Smart Search performance improvement for common words #12450
  • Performance improvement in Smart Search indexing process #17390
  • Update jQuery Autocomplete to 1.4.7 #18113
  • Update CodeMirror to 5.33.0 #18880
  • Update srcset url conversion to handle commas and spaces #18327
  • Custom Fields: Handle tag items properly #19006
  • Fix filepath to PHPMailer language file #19072
  • Display category title as page heading and page title when no menu item for com_content category #19195
  • Respect access level in com_content #18417
  • Miscellaneous PHP 7.2 compatibility fixes

New in Joomla! 3.8.3 (Dec 27, 2017)

  • Support for multiple download sources on update servers (AKA download mirrors) #18926
  • PHP 7.2 Compatibility fixes
  • Update TinyMCE 4.5.8 #18574
  • Multilingual Associations component: reduce the number of duplicate queries #18544
  • [com_fields] Multilanguage: fixing display of fields when the item concerned is set to ALL #18536
  • Eliminate crippling performance of content search plugin for large sites with custom fields #18915

New in Joomla! 3.8.2 (Nov 21, 2017)

  • Security Issues Fixed:
  • Medium Priority - Core - LDAP Information Disclosure (affecting Joomla! 1.5.0 through 3.8.1) More information »
  • Medium Priority - Core - Two-Factor Authentication Bypass (affecting Joomla! 3.2.0 through 3.8.1) More information »
  • Low Priority - Core - Information Disclosure (affecting Joomla! 3.7.0 through 3.8.1)
  • Bug Fixes:
  • Display subcategories in blog layout only when user has access #18408
  • Tags being deleted by any batch action and by drag and drop reordering #18328
  • Search Module not displayed on the core templates error page #18375
  • Fix unneeded repetitive filesystem access / checks causing performance issue in custom fields #17893
  • Fix backend articles manager not listing articles in sub-categories when categories filter is active #18179

New in Joomla! 3.8.1 (Oct 25, 2017)

  • Fix handling of image srcset attribute
  • Some plugin events were triggered multiple times
  • Redirect plugin not redirecting correctly
  • Removed checks causing some admin menu items to be hidden
  • LDAP login broken

New in Joomla! 3.7.5 (Sep 4, 2017)

  • Joomla! is not installing on remote databases #17248

New in Joomla! 3.7.4 (Aug 12, 2017)

  • Security Issues Fixed:
  • Core - Installer: Lack of Ownership Verification (affecting Joomla! 1.0.0 through Joomla! 3.7.3)
  • Core - XSS Vulnerability (affecting Joomla! 1.5.0 through Joomla! 3.7.3)
  • Bug Fixes:
  • Fatal error for PHP 5.3 and a multilanguage site #16966
  • Multilingual com_tags getting wrong language cookie #17084
  • Post installation message: Wrong php detection #16964
  • com_contact address is no longer displayed #16971
  • Visit GitHub for the full list of bug fixes.

New in Joomla! 3.7.3 (Jul 7, 2017)

  • Security Issues Fixed:
  • Core - Information Disclosure (affecting Joomla 1.7.3-3.7.2) More information »
  • Core - XSS Vulnerability (affecting Joomla 1.7.3-3.7.2) More information »
  • Core - XSS Vulnerability (affecting Joomla 1.5.0-3.6.5) More information »
  • Bug Fixes:
  • Calendar fixes #16794
  • Fix frontend menus of menu type "main" or "menu" and backend main menu #16577
  • Tags: Respect Browser Page Title in view Tagged Items #16773
  • Adding thumbs file names in Media Manager #16769
  • Remove PHP memory_limit from max upload size calculation #16741
  • Fix custom fields without a fieldgroup not being displayed #16705
  • Update tinymce to 4.5.7 #16042

New in Joomla! 3.7.2 (May 24, 2017)

  • Fix mime checks #16091
  • Clear cache with more operations #15606
  • Setting week numbers to display per default #16117
  • Fix Page filtering in the Modules manager #16118
  • Fix Copy Reference to Target issue #16178
  • Allow multiple values for the integer field #16153

New in Joomla! 3.7.1 (May 19, 2017)

  • Security Issues Fixed:
  • High Priority - Core - SQL Injection (affecting Joomla! 3.7.0)
  • Bug Fixes:
  • Fixed attribute checks in the new calendar #15573
  • Inject the JInput dependency into the session handler #15605
  • Fix b/c break in JMenuItem #15553
  • Fix article ordering in the backend #15655
  • Fix milliseconds handling in for PHP Versions lower to 7.1.0 #15853
  • Fixing JFilterInput adding byte offsets to character offset #15966
  • Redirection fails on multiple status values produced by old FOF2 Extensions #15738
  • Remove empty locked cache file if callback function terminate process #15592
  • Visit GitHub for the full list of bug fixes.

New in Joomla! 3.7.0 (Apr 27, 2017)

  • This new release features over 700 improvements to the popular CMS, including many features which make administration of Joomla! Web sites easier and more feature-rich, as well as several security updates.
  • One of the biggest new features of this release is the ability for administrators to add Custom Fields to your articles, users, and contacts, and the ability of extension developers to use this feature within their own custom Joomla! Extensions. With 15 different field types you can now easily structure more complex content entry systems to allow your content authors to easily enter their data in a standard manner and display it consistently to your site visitors. Thanks to our great documentation crew, you can find out all about the options and process for using this new feature when you read the Custom Fields tutorial on the Joomla! Documentation site.
  • For those who need to create multilingual sites, the process to translate your content just got significantly easier. The Multilingual Associations Component allows you to easily translate your content from one single, unified interface. You can find out more when you read the Multilingual Associations Component tutorial on the Joomla! Documentation site.
  • Anyone creating new content articles that require a new menu item can now save time with the new Improved Workflow features. You can now create a category, article, and menu item all in one step from within the menu manager.
  • One other added menu-related benefit, for those sites where multiple people are accessing the Backend/Admin-side of the site is the ability to easily manage the admin menu with the new Backend Menu Manager. Now you can create custom menus for the Backend just like you can for the Frontend - allowing you to control what users can see which admin menu options.
  • This release also brings a number of new and enhanced features specifically for developers. Joomla! 3.7 brings improvements within the update system, cache systems and package/extension management, as well as a host of other under the hood advances.
  • Joomla! 3.7 is the eighth and latest release in the 3.x series. Please note that going from 3.6.x to 3.7 is a one-click update and is not a migration. The same is true for any subsequent versions in the 3 series of the CMS.
  • In addition to the features mentioned above, other significant highlights of the 3.7 release include:
  • Do more with TinyMCE - Including new buttons to easily add menu links and contacts and many other improvements
  • Easier Extension Maintenance - Prevent administrators from accidentally uninstalling needed extension package elements
  • User Experience - Your User Experience is improved thanks to the display of your global settings, a flatter backend template, the possibility to share your session between frontend and backend and a number of other minor UX improvements.

New in Joomla! 3.6.5 (Dec 19, 2016)

  • Security Issues Fixed:
  • High Priority - Core - Elevated Privileges (affecting Joomla! 1.6.0 through 3.6.4) More information
  • Low Priority - Core - Shell Upload (affecting Joomla! 3.0.0 through 3.6.4) More information
  • Low Priority - Core - Information Disclosure (affecting Joomla! 3.0.0 through 3.6.4) More information
  • Security Hardening More information
  • Bug Fixes:
  • [#12817] Fix Joomla Updater for Windows Users
  • [#12984] Fix installation language for sr-YU
  • [#12589] and [#13127] Fix default values for user creation on installation

New in Joomla! 3.6.1 (Aug 5, 2016)

  • During the latest release of Joomla! 3.6.1 an issue emerged because of a security fix. 3.6.1 introduced a CSRF token check to the Joomla! Update component as an extra level of security to fix a Medium Level security issue. 3.6.0 down to 2.5.4 (every Joomla! release with the update component) will hit an issue with failing to pass the CSRF token check because those versions don't generate the needed token to pass the check.

New in Joomla! 3.6 (Jul 13, 2016)

  • Joomla! Update has been improved and now allows you to reinstall Joomla’s core files at the click of a button, overwriting any modified file(s) and reverting them back to the default.
  • Joomla! 3.6 contains a lot of UX improvements. Now you can find your modules faster, have tasks done by dropdown, improved user management and so much more...
  • With the new Sub Form Field function in Joomla! 3.6, we added some extra additional functionality next to Repeatable fields. Now you can nest XML forms inside each other or reuse your existing forms inside your current form.
  • Create categories on the fly: It can get frustrating when you create a new item, and you realise that you haven’t created a category yet. Joomla! 3.6 now lets you create a category on the fly for articles, contacts, newsfeeds and banners.
  • Menu type ACL: ACL in the backend did not exist at the menu level, now we have improved that. Give or block certain user groups access to a specific menu, and therefore also all menu items of that menu.
  • See what's in your menus with All Menu Items: The new option to show all items from all menus gives you a quick overview of what is displayed where on your website. It has never been easier to spot duplicated links, missing menu items or just get an overview of every menu on your site.

New in Joomla! 3.5.1 (Apr 6, 2016)

  • Fix root url sometimes returning empty in canonical URLs
  • Fix having to log in twice when user session expires
  • Some SMTP emails could no longer be sent due to a bug in the SMTP email server setup
  • Session restarts caused PHP Errors
  • Fix insertid() returning 0 for the PDO MySQL driver
  • Fix the Empty trash and unarchive button not existing for com_banners

New in Joomla! 3.5.0 (Mar 22, 2016)

  • Download system & environment information: gives users the option to download system/environment information for support purposes.
  • Ability to add a user CSS file to Protostar: currently it is impossible to use a custom.css file when using the Protostar template. This update adds a check to see if the file user.css exists and loads the file to allow for user customisation.
  • Added site and admin links to module user: adds switches to the mod_status module to show/hide links to the front-end and back-end of the site.
  • Article counts: a set of updates that allows the visual presentation of published, unpublished and trashed articles in the Category Manager for articles, banners, contacts and newsfeeds.
  • Random category blog and list order: this update answers a common user request to add a random ordering option for articles in the blog category and category list view.
  • Editor Buttons added to the Toolbar: You no longer need to scroll down the page to find the “readmore” or “insert image” buttons. Editor extension buttons that used to be placed below the text area can now be found in the toolbar where they belong.
  • Easily Insert Modules in Articles: allows users to easily add a module into an article with a button directly on the editor toolbar. Users don’t need to learn any syntax or remember the module details as the user interface does it for them.
  • Drag and Drop Images: Adding an image is now as easy as dragging and dropping it from your computer directly into the content. This works anywhere that you are using the default TinyMCE WYSIWYG editor.

New in Joomla! 3.4.8 (Dec 30, 2015)

  • Users were unable to edit or create items after the 3.4.7 update
  • Fatal error about connection->stat() not existing on external database connections
  • After session timeout users could still navigate the backend but without being able to create/edit items or use pagination/filters

New in Joomla! 3.4.7 (Dec 22, 2015)

  • Security Issues Fixed:
  • High Priority - Core - Session Hardening (affecting Joomla 1.5 through 3.4.6)
  • Low Priority - Core - SQL Injection (affecting Joomla 3.0.0 through 3.4.6)

New in Joomla! 3.4.5 (Oct 23, 2015)

  • Security Issues Fixed:
  • High Priority - Core - SQL Injection (affecting Joomla 3.2 through 3.4.4)
  • Medium Priority - Core - ACL Violations (affecting Joomla 3.2 through 3.4.4)
  • Medium Priority - Core - ACL Violations (affecting Joomla 3.0 through 3.4.4)

New in Joomla! 3.4.4 (Sep 11, 2015)

  • Further en-GB language cleanup
  • Fixes for MSSQL and PostgresSQL Joomla installations
  • jQuery, HTML5Shiv and CodeMirror updates
  • Finished implementing the Joomla codestyle rules

New in Joomla! 3.4.3 (Jul 4, 2015)

  • The renaming of the ClassLoader.php file to classloader.php caused issues which in some isolated cases even broke the CMS.
  • When creating menus of type Smart Search or contact list for 3.4.2 invalid field warnings were displayed when trying to save.
  • The option to disable the count-join in JCategories is permanently enabled on multilingual sites, making extensions that don't use this feature and for example don't have a catid field in their table, fail.
  • Module, Article and Category creation applies a wrong default values for the access level. Instead of the one from the global configuration it just takes none, and thus the first in the list is selected (Guest).
  • The batch model cut the dropdown so you can’t access all items there
  • On the batch model we had some kind of scrollbar flashing

New in Joomla! 3.4.2 (Jul 1, 2015)

  • This release fixes two low level security issues.

New in Joomla! 3.4.1 (Mar 23, 2015)

  • The 3.4 release introduces new features into the CMS such as improved front end module editing, decoupling of weblinks, composer integration, Google new reCaptcha and security improvements by implementing UploadShield code which can detect most malicious uploads by examining their filenames and file contents. Please note: Due to technical reasons we have had to disable the Install from Web Service. We are working to get it back online as soon as possible.

New in Joomla! 3.4.0 (Feb 26, 2015)

  • The 3.4 release introduces new features into the CMS such as improved front end module editing, decoupling of weblinks, composer integration, Google new reCaptcha and security improvements by implementing UploadShield code which can detect most malicious uploads by examining their filenames and file contents. Please note: Due to technical reasons we have had to disable the Install from Web Service. We are working to get it back online as soon as possible. To find extensions please use the Joomla! Extensions Directory.
  • Thanks to the hard work of over 130 different volunteer contributors, over 700 bugs have also been resolved with the 3.4 release of the Joomla! CMS.

New in Joomla! 3.3.6 (Oct 1, 2014)

  • Changes:
  • Regression: Reverting #4104
  • JStringPunycode methods strip # (fragment) element from URL
  • Email cloak broken when link parameters are not parsed
  • #4312 Adding selecting description for custom usage in com_banners
  • Update form.php
  • Fixing com_content ACL to restore "Save as Copy" and "Save & New" buttons
  • Clear limit for list count
  • Fixed broken CropResize method
  • [#32744] All Modules type Articles Categories using same category
  • [#4403] - Password reset don't work in Joomla 3.3.5
  • [#4394] - Error when adding tags via keyboard
  • Security Issues Fixed:
  • High Priority - Core - Remote File Inclusion More information »
  • Medium Priority - Core - Denial of Service

New in Joomla! 3.3.4 (Sep 24, 2014)

  • Medium Priority - Core XSS Vulnerability
  • Medium Priority - Core Unauthorised Logins

New in Joomla! 2.5.18 (Feb 8, 2014)

  • 7 tracker issues fixed

New in Joomla! 3.2.2 (Feb 7, 2014)

  • Over 55 bugs have been resolved with the 3.2.2 release of the Joomla! CMS.

New in Joomla! 3.2.1 (Dec 19, 2013)

  • Thanks to the hard work of 62 different volunteer contributors, over 125 bugs have been resolved with the 3.2.1 release of the Joomla! CMS.
  • Part of that effort came from a bug squash event held at the Joomla! World Conference in early November.
  • The Bug Squad also paid particular attention to solving lockout issues associated with the administrator login password hashing and the Remember Me features under certain circumstances.

New in Joomla! 3.2.1 (Dec 19, 2013)

  • Thanks to the hard work of 62 different volunteer contributors, over 125 bugs have been resolved with the 3.2.1 release of the Joomla! CMS. Part of that effort came from a bug squash event held at the Joomla! World Conference in early November. The Bug Squad also paid particular attention to solving lockout issues associated with the administrator login password hashing and the Remember Me features under certain circumstances.

New in Joomla! 2.5.16 (Nov 11, 2013)

  • Security Issues Fixed:
  • High Priority - Core XSS Vulnerability
  • Medium Priority - Core XSS Vulnerability
  • Medium Priority - Core XSS Vulnerability

New in Joomla! 3.2.0 (Nov 9, 2013)

  • Content version control
  • Many user interface improvements
  • Easy multi-lingual setup for 64 officially supported languages
  • Built-in Joomla! Extensions Finder as an onsite interface to the Joomla! Extensions Directory (that currently lists over 4000 extensions) providing one-click extensions installation
  • Increased security with strong passwords and two step authentication
  • New rapid development framework for new extension coding

New in Joomla! 2.5.14 (Aug 2, 2013)

  • Joomla 2.5.14 contains 1 security issue and 1 tracker issue fixed

New in Joomla! 3.1.5 (Aug 2, 2013)

  • 1 security issue fixed
  • 7 tracker issues fixed

New in Joomla! 3.1.4 (Jul 29, 2013)

  • 29855 - Automatically set $db and $app properties on plugins
  • 31349 - Display Error Message when Magic Quotes is Enabled
  • 31488 - Added Observer pattern to JTable
  • 31289 - Added JResponseJson as a CMS library class
  • 31087 - Add SQL queries profiler in Debug zone
  • 30966 - Added handling for punycode urls and email addresses
  • 29945 - Show Joomla username in admin area
  • 31130 - Added js files to protostar template
  • 30370 - Added ability to add sprintf variables to JText string
  • 30324 - Added ability to restrict the number of displayed results to mod_related_items
  • 30525 - Added a PSR-0 compatible autoloader to JLoader
  • 30931 - Allow folder names without 's' at the end
  • 31004 - Add JTwitter package to /libraries/joomla

New in Joomla! 3.1.1 (Apr 30, 2013)

  • no security issues fixed
  • 11 tracker issues fixed

New in Joomla! 3.1.0 (Apr 25, 2013)

  • What are the new features of Joomla! 3.1:
  • 29855 - Tags (click here to see the recent blog post about it)
  • 30298 - Added note form field
  • 29822 - Show logs in debug console
  • 30085 - Refactor installation to use new application and MVC classes
  • 29965 - Added pagination in COM_SEARCH component
  • 29770 - Added triggers on save for com_config
  • 30230 - JPlugin autoloadLanguage property
  • 28924 - Added SQL Server subclass for FinderIndexer
  • 30318 - Media wiki package
  • 30369 - OpenStreetMap package
  • 30364 - UNION ALL feature
  • Miscellaneous: 28574 - Removed the GeSHi plug-in
  • Security issues fixed in Joomla! 3.1:
  • Moderate Priority - Core - XSS Vulnerability. More information »
  • Moderate Priority - Core - DOS Vulnerability. More information »
  • Low Priority - Core - XSS Vulnerability. More information »
  • Low Priority - Core - Information Disclosure. More information »
  • Low Priority - Core - XSS Vulnerability. More information »
  • Low Priority - Core - Privilege Escalation. More information »
  • Low Priority - Core - XSS Vulnerability. More information »
  • Bugs fixed in Joomla! 3.1:
  • There are a whopping 242 bug fixes for Joomla 3.1.

New in Joomla! 3.1 Beta 5 (Apr 22, 2013)

  • 29855 - Tags (click here to see the recent blog post about it)
  • 29822 - Show logs in debug console
  • 30085 - Refactor installation to use new application and MVC classes
  • 29965 - Added pagination in COM_SEARCH component
  • 29770 - Added triggers on save for com_config
  • 30230 - JPlugin autoloadLanguage property
  • 28924 - Added SQL Server subclass for FinderIndexer
  • 30318 - Media wiki package
  • 30369 - OpenStreetMap package
  • 30364 - UNION ALL feature
  • Miscellaneous: 28574 - Removed the GeSHi plug-in

New in Joomla! 3.1 Beta 4 (Apr 15, 2013)

  • 29855 - Tags (click here to see the recent blog post about it)
  • 29822 - Show logs in debug console
  • 30085 - Refactor installation to use new application and MVC classes
  • 29965 - Added pagination in COM_SEARCH component
  • 29770 - Added triggers on save for com_config
  • 30230 - JPlugin autoloadLanguage property
  • 28924 - Added SQL Server subclass for FinderIndexer
  • 30318 - Media wiki package
  • 30369 - OpenStreetMap package
  • 30364 - UNION ALL feature

New in Joomla! 3.1 Beta 3 (Apr 2, 2013)

  • 29855 - Tags (click here to see the recent blog post about it)
  • 29822 - Show logs in debug console
  • 30085 - Refactor installation to use new application and MVC classes
  • 29965 - Added pagination in COM_SEARCH component
  • 29770 - Added triggers on save for com_config
  • 30230 - JPlugin autoloadLanguage property
  • 28924 - Added SQL Server subclass for FinderIndexer
  • 30318 - Media wiki package
  • 30369 - OpenStreetMap package
  • 30364 - UNION ALL feature
  • Miscellaneous: 28574 - Removed the GeSHi plug-in

New in Joomla! 3.0.3 (Feb 22, 2013)

  • 3 security issue fixed
  • 2 new features
  • 136 tracker issues fixed

New in Joomla! 3.0.1 (Oct 11, 2012)

  • Security Issues Fixed:
  • Low Priority - Core - XSS Vulnerability. More information
  • New Feature:
  • 29445 Allow different update packages for different version dev levels
  • Until now, for both core auto updates and extension updates, update packages have been controlled by the 2-digit version number (e.g., 2.5, 3.0). It is not possible, for example, to have users of version 3.0.0 install a different update package than users of 3.0.1. This means the update packages are larger than they need to be. This feature allows for checking all three elements of a version number.
  • Tracker Issues Fixed:
  • "Can't build admin menu item" error while (re)installing component
  • *Missing client field (and other fields) when creating a new banner
  • *Missing list limit in Extensions Manager => Manage and Install Languages
  • *Filtering by category does not work for Featured articles
  • getComponentsWithConfig does not work for custom components
  • unpublish button don't work
  • *J3.0 alpha 2.0 : Fieldset not working for plugin extension
  • Language dropdown too small in backend login using IE8
  • Clean up code style
  • Publishing date instead of creation date in com_content/category/view.feed.php
  • com_banners: BannersModelClients SQL error (group by banner id)
  • A sinjgle contact does not send email and return 500 system error
  • Updated sample data for SQL Azure database
  • *Missing required="true" in front-end login form
  • Remove installation folder' button not always working
  • Auto update doesn't work in version 3.0.0
  • Problems in update from 2.5 to 3.0
  • Can't install Joomla update as an extension
  • Joomla 3.0 stable package has wrong file permissions
  • Language String TPL_HATHOR_COLOUR_CHOICE_BLUE Missing
  • Override Language String Created Cannot be Deleted
  • Languages Cannot be Installed Using Install Languages
  • images upload to the wrong folder in image manager
  • Javascript Error with JHTML tabs
  • Prostar Template not honouring module Title Hide.
  • Isis: Jumping table rows on mouseover
  • *Protostar page navigation does not work
  • Isis template showing User Name is not a good idea
  • Beez3 template_Details.xml needs a rework and beez3 itselfs needs additional files
  • *Isis wong implementation of the color parameter
  • beez3 CLOSE INFO
  • Components Title Truncated to 40 Bytes in ISIS
  • *article manager options -
  • *Normalising isis UI part1 administrator folder
  • Isis template showing User Name is not a good idea.
  • unpublish button don't work.
  • One character too much in JFeedPerson
  • Wrong file name in garbagecoro cli app
  • beez3 -- single contact.
  • *Normalising isis UI part2 components, modules, plugins
  • Broken installation with PostgreSQL.
  • Untranslated string COM_INSTALLER_INSTALL_FTP
  • beez3: change meta tag name from apple-touch-fullscreen to apple-mobile-web-app-capable.
  • beez3: element closed before opened.
  • multi level menus not support RTL languages well.
  • Back-end: Unable to save FTP Settings - Catchable fatal error
  • Additional places where null should be changed to array().

New in Joomla! 3.0.0 (Sep 28, 2012)

  • Incorporation of Twitter Bootstrap into a jui media package.
  • A new responsive, mobile device friendly administrator template--Isis-- and interface.
  • A new front end template--Protostar-- built using Twitter Bootstrap.
  • Updated accessible template called Beez3.
  • A simplified 3-step installation process.
  • PostgreSQL Driver. You will be able to run Joomla 3.0 sites using the PostgreSQL database.
  • PHP Memcached Driver
  • Use of JFeed for feed management rather than SimplePie
  • Installation of language packages directly from the extension manager
  • Guest user group present by default
  • Saving blank articles allowed
  • New administrator statistics module
  • Update TinyMCE to version 3.5.6
  • Continued clean up of older unused code, files and database fields and tables and improved standardization of tables.
  • Improvements to Smart Search
  • Extensive work on code style standardisation and consistency
  • Unit testing in the CMS
  • Updated system tests in the CMS
  • Custom active menu item for menu module
  • Let the SEF plug-in add the canonical url to the head
  • Version 12.2 of the Joomla Platform

New in Joomla! 2.5.7 (Sep 14, 2012)

  • New Feature Added:
  • Installing Language packs from Extension Manager in 2.5.x. Click here to read a blog about this new feature.
  • Security Issues Fixed:
  • Low Priority - Core - XSS Vulnerability. More information.
  • Low Priority - Core - XSS Vulnerability. More information.
  • Tracker Issues Fixed:
  • htmlspecialchars() and multiple menu modules of the same menu.
  • *User with spaces as password can not log in.
  • Smart Search module does not read static filter setting from module parameters.
  • Smart Search - CLI Indexer doesn't catch exceptions.
  • Custom sample data install issue with driver mysql.
  • Com_finder missing show_advanced_tips parameter => can't hide advanced tips.
  • Template fails to copy.
  • JFile class not loaded when use cache handler != file.
  • captcha cause fatal error when the "captcha" field is not present in "configuration.php" after an upgrade.
  • Increase stability in language installer.
  • Using Chrome for Android generates an error in browser.php (line 562)
  • Email exposed through RSS and Atom feeds.
  • mod_articles_category "read more" truncation not functioning properly.
  • Fix Array to string conversion notices (PHP 5.4 only).Thanks Rouven
  • Can't build admin menu item error while (re)installing component.
  • Overriding settings in the language xx-XX.localise.php
  • *When URL Language Code is removed language switcher module redirects to URL without .html suffix.
  • Can't get past step 4 "Database Configuration".
  • Joomla 2.5.4 Timezones being doubled.
  • White page on contact form with SEO enabled.
  • Update TinyMCE to version 3.5.4.1.
  • DB error "session" table Duplicate entry.
  • mod_wrapper doesn't support iframe without border.
  • Loss of data when editing an article through the front end.
  • *JS error in page 6 of installation.
  • E_STRICT: JArrayHelper::pivot should be declared as static.
  • Replace DS with DIRECTORY_SEPARATOR in com_media.
  • Make the field for installing sample data easier to use (Elin Waring)
  • *Copy Template Feature - language files have capital letters (Jean-Marie Simonet)
  • Registration form: language override for "Name" label causes side effects (Johannnes S-F)
  • Undefined property: JSite::$registeredurlparams (Rouven Weßling)
  • Article Media Manager: 'This file is too large to upload' appears in a Media Manager screen
  • administrator/mod_menu Bug! Thanks Sebastian
  • mailto fatal error when sending article-mail in joomla 2.5.6.
  • Articles appearing in title.
  • Use the MVC legacy aliases in the administrator (Rouven Weßling)
  • Replace uses of JHtml::core() (Michael Babker)
  • Don't use APIs not present in Platform 12.2 (Rouven Weßling)
  • Wrong Content Type for JSON response (Elijah Madden)
  • Security concern: passwords should not be sent via email (Johannes S-F)
  • Add more sniffs to the code style checker (Rouven Weßling)
  • Commit of progress bar feature missed a layout file.

New in Joomla! 3.0 Beta 1 (Sep 10, 2012)

  • Incorporation of Twitter Bootstrap into a jui media package.
  • A new responsive administrator template--Isis-- and interface.
  • A new front end template--Protostar-- built using Twitter Bootstrap Updated accessible template called Beez3
  • PostgreSQL Driver. You will be able to run Joomla 3.0 sites using the PostgreSQL database.
  • PHP Memcached Driver
  • Use of JFeed for feed management rather than SimplePie
  • Installation of language packages directly from the extension manager
  • Guest user group present by default
  • Saving blank articles allowed
  • New administrator statistics module
  • Update TinyMCE to version 3.5.6
  • Continued clean up of older unused code, files and database fields and tables and improved standardization of tables.
  • Improvements to Smart Search
  • Extensive work on code style standardisation and consistency
  • Unit testing in the CMS
  • Updated system tests in the CMS

New in Joomla! 2.5.6 (Jun 20, 2012)

  • Mark JXMLElement as deprecated and don't use it in type hinting
  • Use legacy aliases for the MVC in the site
  • JApplication::registerEvent() is not static anymore causing a fatal error
  • Edit article Button missing after upgrade to teh latest version 2.5.5 from 2.5.4
  • FinderController duplicate lines
  • Delete toolbar broken in com_media in 2.5.5
  • Lang string missing
  • Fatal error updating with Extension manager > Install
  • Fix a potentially fatal issue in JXMLElement
  • 404 Hits of com_redirect fails after Manual update
  • JUser class is missing the public vars for the 2 new columns lastResetTime and resetCount
  • Menu type aliases causing fatal php error

New in Joomla! 2.5.4 (Apr 3, 2012)

  • New Features Added:
  • Add option to show full CMS version number in generator tag (Mark Dexter)
  • Implementing Access levels for Content Languages (JM Simonet, Dennis Hermatski, Christophe Demko)
  • Make the auto-update process more reliable across different hosts (Nicholas Dionysopoulos)
  • Security Issues Fixed:
  • Low Priority - Core - Information Disclosure. More information »
  • Low Priority - Core - XSS Vulnerability. More information »
  • Tracker Issues Fixed:
  • Add warning/no warning icons on Database screen
  • Batch processing broken
  • Calendar readonly="true" status prevents loading custom calendars.
  • Com_menus item model calls non-existing method
  • Com_search: Show Search Results results in PHP fatal error
  • Content menu displayed when disable component content
  • Don't show the site secret and optimize ConfigModelApplication
  • Fix for com_modules getListQuery returning too many rows [patch attached]
  • Fix for override manager regarding plugins
  • Joomla 1.7.x batch processing allow move items to trashed categories
  • Languages overrides not showing content when showing is set to all
  • New version module interferes with license notice in Hathor
  • Protected extensions can be disabled through the toolbar
  • Version Module for Admin to show Joomla version in Footer admin Template
  • PHP Notice in back end login when cache enabled.
  • Editor-XTD buttons Issues in FireFox 9
  • #28299 can cause performance issue if root category is loaded in non multilanguage mode
  • Autoupdate fails for components after applying a patch from issue #24305
  • Incorrect SQL statement for MenuItems in menuitem library
  • JVersion::getHelpVersion() unnecessarily checks the version
  • Move the check if multilang is enabled to the libraries
  • SEF issue when using article button in multilanguage
  • $app variable can possibly not be set, causing a PHP error
  • $message not initialized in ~/components/com_users/controllers/reset.php
  • Backport JSession::checkToken() from the platform
  • Bug with Rebuild button in the Menu Manager
  • Database change broke JUser getGroups() API
  • Don't use DS anymore
  • Fix @since tags for 2.5.4. Code style in CMS libraries.
  • Fix use of deprecated API in com_installer
  • Joomla 2.5 com_content generates non-valid xhtml
  • PHP Strict Standards: Non-static method UsersHelperRoute::getResetRoute() should not be called statically, assuming $this from incompatible context
  • Strict error with JSite::getMenu()
  • Update 1.7 strings to 2.5
  • An unpublished linked contact leads to articles not being displayed.
  • Basic Search contact search is broken
  • Batch processing of articles doesn't work for users with restricted rights
  • Com_redirect redirects should use 301 redirect, not 303
  • Com_wrapper doesn't support iframe without border
  • Dublicate Template Styles
  • Error in Banner Track Clicks
  • Error notice using search in joomla 2.5
  • Missing security check of file default_links.php
  • Notice in com_contact when sendEmail fails
  • Notice message in banners model
  • Regression in the com_installer warnings
  • Result Description "if condition" was missing in com_finder
  • RSS feed of com_finder throws fatal error
  • Saving 'Start Publishing' updates 'Finish Publishing' not 'Start Publishing'
  • Wrong 'category' tag in category feed
  • Backslashes are added every time you save Wrapper menu item
  • Joomla on Windows Azure - Load time is slow
  • Path delimiter doesn't work properly on SQL Server and SQL Azure
  • Remove duplicate SQL Server directories.
  • Sql error generated in menus
  • SQL error generated in system redirect plugin
  • Sql syntax error in libraries/joomla/database/table/session.php:137
  • Template is not displayed in the Styles (backend)
  • Unable to create an article
  • Users notes categories
  • Front end article creation in unpublished category
  • ContentBuildRoute does not remove layout if link attached to menu item
  • Mod_menu invalid rendering of items of type alias and url
  • Offline image overflow
  • Profile fields not available in edit, only registration
  • Typo in com_content view
  • Add uninstall support for possibly installed media files
  • Com_joomlaupdate does not delete joomla.xml file in root folder
  • Deleted files not being deleted during version update
  • Error in Database tab in Extension Manager
  • Error message contains the string Joomla 1.7
  • Extension Manager: Database does not fix text filter problem
  • Extension Manager: Database does not fix update problem
  • Fix installation for Joomla 3.0
  • Installation - Check to ensure the schema file exists
  • Javascript issue on IE7 during install
  • Path of home sub-menu items contain "News Feeds"
  • Remove the use of all deprecated functions (except JRequest and JException) in the installation.
  • Typo in joomla-cms / installation / models / configuration.php
  • Unable to install multiple updates at once
  • Update SQL query requires temp table permissions
  • Version Number Module Not Assigned to Menus
  • Joomla Update component requires Purge Cache to change Update Server
  • JHtmlGrid::sort broken
  • Media.php jInsertFieldValue
  • Please first make a selection from the lis't: Huge error on 40+ sites
  • Update MooTools to 1.4.5
  • Update MooTools to version 1.4.4
  • Upgrade MooTools to version 1.4.3
  • Change permissions in language manager changes default language to english
  • Changes to the Administrator Language Strings
  • COM_USERS_FITLER_NOTES
  • Content Languages ordering broken
  • Entering link to article via Article button -making it Multilanguage aware
  • Implementing Access levels for Content Languages
  • Inconsistent Language Constants in the Beez_20 Language Files
  • Installing sample data and defining as site lang another lang then English breaks links
  • Joomla! 2.5 - Multilanguage feature - external links end with 404
  • PHP 5.3.8 Notice for some language packs with iconv
  • Smart search author not translated.
  • Wrong constants in article menu item
  • Wrong redirection when login on multilang site with SEF on.
  • Articles; H1 tag appearing before the article title...
  • User profile page does not HTML escape the user's name
  • Flash uploader rtl - browse button disabled
  • Archive module error when no articles are archived
  • Editor buttons in Custom HTML module
  • Featured articles parameter does not work in mod_articles_popular
  • Incorrect ordering value if editing last module
  • JModuleHelper All but selected does not work correctly when there is no itemid
  • Joomla 2.5beta1 module alternative layout on admin side don't work
  • Mod_articles_category ordering
  • Mod_languages html 5 validation error empty action attribute
  • Mod_login module does not HTML escape the user's name
  • Mod_search head search link title not escaped
  • Module weblinks does not import needed JModel class
  • No access to params "images" in mod_articles_news
  • Notice in weblinks module
  • PHP Fatal error when detele a article category assigned to a artcle categories module**
  • The related articles modules (mod_related_items) are not showing
  • Multilanguage Status module report version 1.7.1 should be 2.5.x
  • The package installer insert two database entries on templates
  • Use less deprecated functions
  • XHTML 1.0 Transitional
  • Change 28026 so it doesn't modify platform files
  • Fix JSession::checkToken() to be forward compatible with Joomla 3.0
  • JAccess::getGroupsByUser doesn't work as expected in case of guest user
  • JMail addAttachment ignores parameters (filename, encoding, type)
  • Missing parameter handling in magic proxy methods for name quotes
  • Sync some changes from the platforum
  • Zip Archive native unpack wrong result
  • Can't update #__update_sites table at extension install on SQL Server
  • Captcha Typo (with solution)
  • Code error plgUserProfile line 188
  • Date format in /plugins/usr/profile/profile.php is wrong
  • JText values in js of quick icons force to escape single quotes
  • Languagefilter: build rule is deleting "option" param
  • Loadposition strips the $ character from html modules
  • Notice 'Only variable references should be returned by reference'
  • Plugin Loadmodule ignores selected style
  • Recapthca image doesnt show up, maybe because of https secure website
  • System cache throws warning on Ajax requests with JSON response
  • System messages included in cached pages
  • Update TinyMCE to version 3.4.9 + optimizations
  • Entering an article link via the Article button=>links broken in SEF
  • Alternative Sample Data Files (blog and brochure)
  • Empty trash not trashing some sample data articles
  • TinyMCE settings in SQL don't reflect recent changes in options.
  • Beez 2.0 has one css file still hardcoded with template name
  • Beez 5 generating warings/notices
  • Hathor forgotten in #28072
  • JText values in js beez templates force to escape single quotes
  • Labels missing for Smart Search / Finder module
  • Missing css .icon-32-print class in bluestork template
  • Sitename not escaped
  • 27052 does not work as should for System Links menu items
  • Creating menu items saves selection when it shouldn't

New in Joomla! 2.5.3 (Mar 16, 2012)

  • 2 security issues fixed

New in Joomla! 2.5.2 (Mar 6, 2012)

  • Joomla 2.5.2 contains:
  • 2 security issues fixed
  • Security Issues Fixed:
  • High Priority - Core - SQL Injection.
  • Medium Priority - Core - XSS Vulnerability.

New in Joomla! 2.5.1 (Feb 3, 2012)

  • 2 security issues fixed
  • 30 tracker issues fixed

New in Joomla! 2.5 (Jan 25, 2012)

  • Along with new features such as advanced search and automatic notification of Joomla core and extension updates, the Joomla CMS for the first time includes multi-database support with the addition of Microsoft SQL Server. Previous versions of Joomla were compatible exclusively with MySQL databases.
  • “Multi-database support is a huge step forward for Joomla, which is already powering more than 1.6 million websites worldwide. It ensures companies and organization, both large and small, will save even more money and time by adopting Joomla,” said Ryan Ozimek, president of Open Source Matters, a non-profit created to provide organization, legal and financial support to the Joomla project. “No longer will Joomla developers be tied down to a particular database or have to spend more money and time integrating other software to get Joomla to communicate with their database. This enhances Joomla’s scalability immensely.”
  • Other key features in Joomla 2.5 includes:
  • Automatic notification when a Joomla or extension update is available. When logged into the control panel, site administrators will instantly have access to new notification buttons that allows them to see and act on the latest updates. In addition to updates for the Joomla CMS, a second button offers third party extension notification updates.
  • A better natural language search engine to the Joomla core. Complete with auto-completion and stemming (for example if you type “running” in a search field you also see run), it is faster and more versatile than the standard search.
  • “We literally received thousands of pieces of input at ideas.joomla.org into what functionality should be added to Joomla 2.5, and overwhelmingly enhanced notifications and more elegant search topped the list,” said Mark Dexter of the Joomla Production Leadership Team. “In fact, the automatic notification for core and extension updates received the most votes for a feature that people wanted in 2.5. But we didn’t stop with just those two. Joomla 2.5 is a major overhaul with more than 24 new features that we have highlighted at joom.la/25features.”
  • Joomla 2.5 adheres to Joomla’s newly-adopted six-month release cycle that began with the previous Joomla CMS release of Joomla 1.7 in July, 2011.

New in Joomla! 1.7.1 (Sep 28, 2011)

  • Administration:
  • Template manager missing toolbar icons - 26609
  • Detect a BOM in configuration.php - 26026
  • Moving an existing single menuitem to another menu. using the drop down in 1.7.0 * - 26512
  • Test for native ZIP in system information + some minor stuff - 26690
  • Trash option available while viewing trashed items - 26644
  • Menus caching issue - 26518
  • Users can lock everyone out of the administrator* - 26356
  • File and package installations are not updateable via the Joomla! Updater - 26818
  • Add joomlacms and cli folders - 26793
  • Menu Manager Menus issue with module assignment - 24654
  • Authentication and Login:
  • Users Manager Log In Form Required Field Indicator - 24310
  • Browsers:
  • global configuration broken in IE9 - 26448
  • Code Style:
  • Fix some mistyped and @package names in the CMS - 26396
  • Clean up admin and installation CSS - 26710
  • Components:
  • Modules manager showing error of undefined constant COM_MODULES_ERR_XML - 26542
  • [#26423] com contact - rendered extra string via var_dump() - 26814
  • com_content Form View $article object that does not exist in the _prepareDocument method on line 115 - 26701
  • com contact -- add finishing touches to sortname fields* - 26423
  • *Wrong param in display date in category listing - 26837
  • Front end article display duplication/omission when author linked to trashed contact or when two co - 26673
  • *Register to read more redirects to login page not registration - 26696
  • Submenu items in deeper menu-levels appear although they have no active parent item - 24275
  • banner manager- clients - empty trash icon - 26433
  • Warning in the search - 26452
  • Banners Manager - trash icon visible when no trashed banners - 26432
  • Client does not properly display in Extension Manager Update view - 26522
  • Search word is required for com_search view - 26695
  • Weblinks - several issues - 26574
  • Database:
  • Session storage overflow leads to - 26622
  • Category descriptions too short / no warning when truncated - 26686
  • Improper datatypes in database - 25307
  • Installation:
  • *Sample data button can be clicked twice - 26657
  • Make the installation more suitable for smaller screens - 26534
  • JUpdate target platform test - 25471
  • Remove unused view file in com_installer - 26474
  • PHP version check at installation says Joomla 1.6 - 26443
  • xx-XX.lib_joomla.ini file not installed into /language/xx-XX folder - 26803
  • Prepare 1.7.1 upgrade process - 26756
  • Languages:
  • Multi-language site setting new user language always to default - 26717
  • Incorrect terminology in Language Switcher module - 26416
  • untranslated string from *.xml - 26502
  • mod_languages: cache does not work properly with menu associations - 26454
  • Typo in new installation using the sample data - 26431
  • Langaugefilter plugin - wrong default for menu_association - 26552
  • Layouts:
  • Login description containing markup displayed regardless of presence of content - 26753
  • Media Manager:
  • Flash uploader is broken - 26603
  • Modules:
  • Incorrect references to com_user - 26654
  • Language switcher module wrong link with menu associations when no SEF - 26683
  • Modules should be able to be saved with no position. - 26766
  • wrong file name - 26510
  • Loadposition does not load more then one module - 26446
  • No translation in title column of module manager - 26470
  • com_modules language has a typo. Patch attached - 26543
  • Syndication RSS Feeds (module) not working in Joomla! 1.7.0 Stable - 26483
  • No translation when adding extra quick icons - 26706
  • *mod_multilangstatus missing case - 26852
  • Platform:
  • Sync more changes form platform 11.2 - 26781
  • Sync JParameter changes from platform 11.2 - 26823
  • Undefined index: CLIENT in updateradapterscollection.php - 26445
  • Unused JDate code causing "Catchable fatal error" - 24532
  • Sync more changes from platform 11.2 - 26533
  • Sync more changes from platform 11.2 - 26691
  • Catchable fatal error: Object of class DateTimeZone could not be converted to string - 26694
  • Missing return in modeladmin.php - 26568
  • Sync more changes from platform 11.2 - 26631
  • [patch] fix for router notices * - 26501
  • Favicon disappears - 26451
  • Alternative Menu Items / JCategoryNode Showing Errors - 26459
  • Sync more changes form platform 11.2 - 26824
  • Fix some minor code style differences between trunk and 11.2 - 26822
  • Improvements to batch processing - 26844
  • Plugins:
  • Loadmodule plugin ignores its style setting - 26827
  • Update TinyMCE to version 3.4.4 - 26594
  • Sample Data:
  • Beez 5 default values - 26498
  • Fix typo in sample data (rev. #22070) - 26806
  • Duplicate entry for session - 25706
  • *Ordering column issue for _menu table in sample_data.sql - 26655
  • Typo in sample data - 26682
  • Increase at jml_redirect_links table fields old_url, new_url and referer up to 2000 symbols - 26789
  • Updating README - 26867
  • Search Engine Friendly:
  • Update robots.txt due to the commit of 26793 - 26836
  • Templates:
  • Powered By 1.6 image - 26601
  • CSS for system message should be the same in installation screen and the rest? - 26318
  • wasted space by images / javascript source files - 25761
  • Sample data module pages new styling and style corrections. - 26829
  • Inconsistency in Admin Template options - Show Site Name - 26496
  • Add stats toolbar icon - 26715
  • User Interface:
  • Untranslated Strings DELETE="Delete" Media Manager & Details View in iframe - 26490
  • Incorrectly labeled folder in the Media manager + Options tips - 26535
  • Incorrect english not en-GB - 26499
  • Incorrect english in template - 26497
  • Improve the headings in the installation - 26350
  • Improve english grammar - 26500
  • Modules position filter looks odd and behaves wrongly in modules view - 26792

New in Joomla! 1.6.0 (Jan 11, 2011)

  • Finer access controls for viewing and editing content with configurable user groups and viewing levels
  • A user-defined category structure, from simple one-level to complex multi-level categories
  • Installation improvements allowing for multiple extension installations in one package, updatable with a single click
  • Expanded language support for easy production of multi-lingual sites
  • Start and end publishing times for modules with more control over where they display,
  • Fresh new templates and semantic markup to please the eye as well as the search engines
  • More creative control through template styles
  • Hundreds of additional features, streamlining workflow and productivity

New in Joomla! 1.5.22 (Nov 6, 2010)

  • Bugs fixed:
  • Inadequate filtering of request variables causes database errors.

New in Joomla! 1.5.18 (May 30, 2010)

  • Security:
  • High Priority - Core - XSS Vulnerabilities in back end. More information »
  • Components:
  • No component issues were fixed for this release
  • Modules:
  • No module issues were fixed for this release.
  • Plugins:
  • Revert issue 19859 (Graceful handling of Apache plugin failures) (20424)
  • Legacy:
  • No legacy issues were fixed for this release.
  • Templates:
  • No Templates issues were fixed for this release.
  • Language:
  • No Language issues were fixed for this release.
  • Administrator:
  • No Administrator issues were fixed for this release.
  • System:
  • No System issues were fixed for this release.
  • Statistics for the 1.5.18 release period:
  • Joomla 1.5.18 contains:
  • 1 issues fixed in SVN
  • 3 commits
  • Tracker activity resulted in a net increase of 21 active issues:
  • 29 new reports
  • 7 closed
  • 1 fixed in SVN
  • At the time the 1.5.18 release was packaged, the tracker had 337 active issues:
  • 195 open
  • 105 confirmed
  • 37 pending

New in Joomla! 1.6.0 Alpha 2 (Nov 6, 2009)

  • ACL: access management for global permissions as well as content item specific permissions, variable usergroups, users member of more than one usergroup, permissions are inherited, really fast
  • Extendable user profile, profile view in frontend, extendable user parameters
  • Tableless com_content layouts
  • Improved com_content modules (mod_articles_archive, mod_articles_latest, mod_articles_popular)
  • Article linker plugin for editors
  • New frontend template (atomic)
  • New backend template (bluestork)
  • New uploader for media manager

New in Joomla! 1.5.14 (Jul 31, 2009)

  • This release contains fixes for two material bugs that were introduced in version 1.5.13 and one low level security issue.

New in Joomla! 1.5.13 (Jul 23, 2009)

  • This is a security release and users are strongly encouraged to upgrade immediately.
  • This release contains 26 bug fixes, two moderate-level security fixes and one low-level security fix. It has been 3 weeks since Joomla 1.5.12 was released on July 1, 2009.

New in Joomla! 1.5.12 (Jul 1, 2009)

  • The Joomla Project is pleased to announce the immediate availability of Joomla 1.5.12 [Wojmamni Ama Woi]. This release contains a number of bug fixes and three moderate-level security fixes. It has been less than a month since Joomla 1.5.11 was released on June 3, 2009.
  • This release marks an important milestone for the Joomla Project due to the upgrade of the PEAR library to the new BSD licensed version, which brings the codebase into full compliance with the GPL. In addition, this release contains an important upgrade to TinyMCE v 3.2.4.1.
  • The Production Working Group's goal is to continue to provide regular, frequent updates to the Joomla community.

New in Joomla! 1.5.10 (Mar 29, 2009)

  • Security:
  • One low-level and one moderate-level security issue were fixed in this release:
  • Moderate Priority: A series of XSS and CSRF faults exist in the administrator application. Affected administrator components include com_admin, com_media, com_search. Both com_admin and com_search contain XSS vulnerabilities, and com_media contains 2 CSRF vulnerabilities. More information »
  • Low Priority: A XSS vulnerability exists in the category view of com_content. More information »
  • For additional information, visit the Joomla Security Center.
  • Components:
  • Article Alias no longer missing from Category Views (14228)
  • Section List now drills down correctly to a Category List with Global Content Filters (14510)
  • Web link Router now uses correct Category value (14705)
  • Article HTML filtering correct when only one Filter group selected (14758)
  • Tooltip Help corrected for Section, Category, and Article Alias (15007)
  • Sorting lists by values other than Order corrected (15107)
  • Archived Article Filter Function works correctly (15124)
  • Ampersand in site name no longer breaks Position value in vCard (15143)
  • Added "/" before URL in Remind Me and Password links for com_user (15215)
  • Search works properly using international characters with SEF enabled (15233)
  • Register to Read More in redirect URL correct for Section and Category Menu Items (15266)
  • Multiple Search Menu Items now return correct ItemID (15293)
  • com_media no longer incorrectly loads CSS files from the backend (15354)
  • Fixed invalid XHTML output in com_content and com_contact (15362)
  • Small errors in code comments corrected for com_user (15461)
  • Modules:
  • Changing the module's 'Position' value now correctly changes the value for the 'Order' listbox. (12119)
  • When Module is saved, Module's cache is now cleared (12137)
  • Encoding behavior for quotes and ampersands corrected in Modules (13111)
  • Menu image alignment resolved (14071)
  • Menu Alias respects Active setting (14767)
  • Resolved tag error in mod_feed (14948)
  • Login Redirect returns to current page when no Redirect URL is specified (15376)
  • Plugins:
  • Fixed ID tags used by openid.js (13285)
  • Pagebreak works correctly with JCE (14525)
  • Pagebreak outputs correct XHTML elements (14496)
  • Pagebreak accurately tracks active page (14558)
  • Pagebreak works correctly with Section tables (14827)
  • Caching error resolved for Remember Me function (14857)
  • Menu Item changes are now cached properly (14896)
  • SEF Plugin correctly handles "Data" attribute (15137)
  • Load Position no longer deletes dollar sign and next two positions, in Module output (15237)
  • Legacy:
  • No legacy issues fixed for this release.
  • Templates:
  • Beez: Correct Last Updated date used in Section Blog (14571)
  • JA Purity: All Article text no longer linked when Category presented (14286)
  • rhuk Milkyway: Correct authorEmail value (14439)
  • Corrected RTL issue for Site Title when mouse hovering over Template Logo (14945)
  • Language:
  • Localization for user name corrected in registration form (14468)
  • Corrected localization issue for new Module (13999)
  • User details translatable (14710)
  • Localization corrected for installation of Component (14859)
  • Copy Menu Items function is now translatable (14944)
  • Pagebreak now translatable (15300)
  • Uninstalling a Component now has all Language Strings (15375)
  • Administrator:
  • Categories are now sortable in reverse order by Order data element (14004)
  • Parameter Element ID for folderlist and filelist are correct (14514)
  • Date format correct for 'checked out date' (14381)
  • System:
  • Installation of Extensions no longer fails when zip files are included (9701)
  • No longer missing l10n in JApplicationHelper::parseXMLInstallFile() (11798)
  • Resolved Javascript errors created by previous SEF Background Image Fix (13973)
  • Resolved problem with error handling in JFactory::getXMLParser (14022)
  • Case-sensitive image extensions (14059)
  • Atom feed validates correctly (14515)
  • JString::RTrim method is correct (14491)
  • Removed short open tag in admin.categories.html.php (14660)
  • JInstallerComponent::_rollback_menu() error resolved when getting DB Connector (14795)
  • File move now correctly returns "false" when not read or writable (14818)
  • Directory Permissions listed correctly for Temp and Log Folders (14865)
  • JFolder::folders no longer returns unnecessary warning (14875)
  • Setting Tooltip Offset works correctly (15006)
  • JArchiveZip::_extractNative() correctly identifies zip_open() failure (15044)
  • Installer.php parseMedia points to correct folder (15047)
  • Custom Install file upgraded on Component installation (15217)
  • Undefined index HTTP_USER_AGENT error fixed in behavior.php (15282)

New in Joomla! 1.5.9 (Jan 10, 2009)

  • Security issues fixed in this release:
  • High Priority: Directory Traversal. A crafted request can allow an attacker to view directory trees on the server. Note: contents of files cannot be edited or deleted, just viewed. More information.
  • Low Priority: SSL Session Token Disclosure. When running a site as SSL ONLY, if a non-SSL request is made, an attacker can obtain the session token. There is NO risk for Web sites that use both HTTP and HTTPS. More information.
  • Components:
  • Fixed Contact Page so that a blank page is not displayed when vCard is not enabled, but is selected in the Contact Parameters
  • Resolved problem with Category View Table where filter did not work when cache was enabled
  • vCard no longer displays excess spaces
  • Small change in components/com_banners/models/banner.php
  • Resolved invalid XHTML 1.0 Transitional issues introduced in 1.5.7 for the Contact form
  • Fixed problem that resulted in erroneous '404 - Contact not found' page for dropdown in Contact View
  • Fixed Contact Category URL problems
  • Fulltext Search for Uncategorized and Archived Articles is now working
  • onPrepareContent issue for non-com_content Components resulting in a warning message has been resolved
  • 'Change Contact Details' link now loads correct page
  • Contact image not displaying in front end
  • Front-end article submission no longer auto-populates, finish publishing date with same date as start publishing
  • Media Manager Javascript error: "Object doesn't support this property or method" that presented for IE has been fixed
  • Space between meta keywords no longer removed when saving Articles
  • com_installer Module View now correctly displays Author e-mail and URL
  • Robots and Author meta retained when copying Articles
  • Article Archive pagination fixed
  • Correction so that unregistered site visitors can no longer access PDF for registered Articles
  • Hits filter in Category List fixed
  • Resolved problem where "Register to read more" incorrectly redirected to Front Page, rather than Article
  • Poll error message resolved
  • Resolved problem where Category List failed to retain Column Sort preference when navigating to a different page
  • Resolved problem in Category List where changing Display # to All in page 2 of list would display no results
  • Category List now correctly shows filtering option in use
  • Corrected 404 error that resulted when menu access was set to Public and Contact Item is Registered
  • Modules:
  • New modules can now be added, even when there are no modules entries already defined
  • Inconsistency removed for Login/Logout Redirection page of mod_login
  • JMenu getMenu() doc error corrected
  • Archive Module Count Parameter and Tool Tip corrections
  • STRPOS error corrected when editing Alias Menu Item
  • Toolbar Image now points to an existing image
  • Plugins:
  • OpenID upgraded to 2.0 protocol, now works with Yahoo
  • plgSystemCache plugin now respect site and page language
  • Page string in plugins/content/pagebreak.php is now properly externalized
  • Legacy Plugin - Login Timeout resolved
  • Access level for Plugins fixed
  • Fixed OpenID Transition issues
  • Templates:
  • RTL feeds PARAM is now saved in database which corrects RTL feeds in Milkyway and Beez
  • CSS and XHTML valid error in JA_Purity resolved, as was invalid CSS validator link
  • JA_Purity default status for Modules defined for right position now collapse correctly, when unused
  • Fixed CSS errors in rhuk_milkyway/css/template_rtl.css
  • Missing H1 text-align in rhuk_milkyway/css/template_rtl.css fixed
  • Beez template override for com_search now displays error messages correctly
  • Corrected Last Updated date for Beez Template
  • Resolved inconsistencies for Beez Template Override Page Titles
  • Contact image changes for Beez override
  • Incorrect File Reference corrected for Beez Template
  • Short PHP Notation in Beez Windows hosting bug introduced in 12798 has been fixed
  • en-GB.com_statistics.ini are now correctly deleted
  • Removed unnecessary string in JA_Purity template
  • Removed unnecessary strings in rhuk_Milkyway template
  • Language:
  • Language INI files that were incorrectly encoded using UTF-8 with BOM have been fixed
  • Untranslated strings in en-GB.ini after SVN 11236 are fixed
  • Fixed untranslated strings in com_weblinks
  • Fixed untranslated strings in com_contact
  • Fixed untranslated Strings in admin/mod_feed
  • Spacer values are now translatable
  • Fixed issue with JA_Purity spacer so that it is now translatable
  • Resolved remaining English string hard-coded in mod_search
  • String missing in en-GB.com_installer.ini
  • Resolved untranslated language string for "Email a Friend" feature
  • Tooltip language string in com_config corrected
  • Administrator:
  • Added better tooltip text for the Help Server Reset button in Global Configuration System Settings
  • Toolbar & value fixed for Media Manager button
  • JInstallerHelper Class Function description has been corrected
  • Help screens made
  • Remove default filter for Super Admininistrator and fix filter whitelist problem
  • Corrected error where Editor deleted content for default filter; UTF-8 compatibility is now enforced with JInputFilter
  • Removed old dev.joomla.org links
  • System:
  • query_batch corrected for SQL error
  • uri.php changes made in 1.5.7 no longer break back-end URLs if $live_site=Http has an uppercase H
  • JFolder::delete bug fixed when folder contain symbolic links on folders
  • Typo in sample_data.sql resolved
  • License correction for PHPMailer in CREDITS.php
  • Fixed error that resulted from invoking JDatabase::Query() more than once
  • Cache space is now correctly released
  • String bug for strspn() resolved
  • Weird characters removed from LICENSES.php file
  • Removed outdated link in the installer language file
  • Fixed typo in Cache Manager
  • Updated Archive_Tar to relicensed BSD version