Ike.ninja

The Joomla Project is pleased to announce the immediate availability of Joomla 2.5.2. This is a security release. The Production Leadership Team’s goal is to continue to provide regular, frequent updates to the Joomla community. Learn more about Joomla! developement at the Developer Site.

The update process is very simple, and complete instructions are available here. Note that there are now easier and better ways of updating than FTPing the files.

Download

New Installations: Click here to download Joomla 2.5.2 (Full package) »

Update Package: Click here to download Joomla 2.5.2 (Update package) »

Note: Please read the update instructions before updating.

Instructions

• New installation and technical requirements
  
• Migration from Joomla! 1.5.x

Want to test drive Joomla? Try the online demo or the Joomla JumpBox. Documentation is available for beginners.

Please note that you should always backup your site before upgrading.

Release Notes

Check the Joomla 2.5.2 Post-Release FAQs to see if there are important items and helpful hints discovered after the release.

Statistics for the 2.5.2 release

• Joomla 2.5.2 contains:
  • 2 security issues fixed

Security Issues Fixed

• High Priority – Core – SQL Injection. More information »
• Medium Priority – Core – XSS Vulnerability. More information »

Joomla! Bug Squad

Thanks to the Joomla Bug Squad for their dedicated efforts investigating reports, fixing problems, and applying patches to Joomla. If you find a bug in Joomla, please report it on the Joomla! CMS Issue Tracker.

Active members of the Joomla Bug Squad during this last release cycle include: A Firoozmandan, Akarawuth Tamrareang, Alain Rivest, Andrea Tarr, Andrew Eddie, Ashwin Date, Bill Richardson, Brian Teeman, Chris Davenport, Christophe Demko, Denise McLaurin, Dennis Hermacki, Elin Waring, Emerson Rocha Luiz, Francisco Marzoa, Ian MacLennan, Jacob Waisner, Jacques Rentzke, James Brice, Janich Rasmussen, Jean-Marie Simonet, Jennifer Marriott, Jeremy Wilken, Kevin Griffiths, Loyd Headrick, Mark Dexter, Matt Thomas, Michael Babker, Mutuga Kigumi, Neil McNulty, Nikolai Plath, Ofer Cohen, Prasit Gebsaap, Rachmat Wakjaer, Rob Clayburn, Roland Dalmulder, Rouven Weßling, Rune Sjøen, Samuel Moffatt, Shaun Maunder, Sudhi Seshachala, Tim Plummer, Tom Fuller, Troy Hall, Viet Hoang Vu.

Bug Squad Leadership: Mark Dexter Coordinator; Elin Waring and Marijke Stuivenberg, Team Leaders.

Joomla! Security Strike Team

A big thanks to the Joomla! Security Strike Team for their ongoing work to keep Joomla secure. Members include: Airton Torres, Alan Langford, Bill Richardson, Elin Waring, Jason Kendall, Marijke Stuivenberg, Mark Dexter, Omar Ramos, Rouven Weßling, Samuel Moffatt.

The Joomla! project is submitting an application to Google to participate in this year’s Google Summer of Code™ (GSoC) program. To be an applicant we need to have some help from our community. We are looking for talented individuals who are able to work well with students to be mentors, as well as for the community to generate ideas for the GSoC students to build.

For Mentors:

Participating in GSoC is a great opportunity for the Joomla community to collect some energy from new blood in the Joomla project, pairing talented individuals eager to learn with skilled mentors, community members who can guide and assist navigating the seas of Open Source Development in the Joomla Project.

If you would like to mentor projects this year please visit the Mentor page where we will be posting up mentor information. This will be a short list of requirements from you, as well as an application form that you will need to fill out. We welcome anyone to submit to be a mentor.

For Ideas

There are two major categories in the Joomla! Project where students will be able to contribute to this year. Unlike past Programs where there was only the CMS to work on, this year students can choose between working on the Joomla CMS itself or the Joomla Platform Project that the CMS is based on.

If you’re a developer who has some time this summer to help out, we invite and encourage you to add an idea to the Joomla GSOC Idea Page for 2012, as well as add to the discussions in the Joomla GSOC Google Group.

• Project: Joomla!
• SubProject: All
• Severity: Moderate
• Versions: 2.5.1 and 2.5.0
• Exploit type: XSS Vulnerability
• Reported Date: 2012-February-29
• Fixed Date: 2012-March-05

Description

Inadequate filtering leads to XSS vulnerability.

Affected Installs

Joomla! version 2.5.1 and 2.5.0.

Solution

Upgrade to version 2.5.2

Reported by Phil Purviance

Contact

The JSST at the Joomla! Security Center.

In the March 2012 survey we received responses from 644,275,754 sites, giving a rise of 31.4M hostnames (5.1%) since last month. Apache continued to gain hostnames this month with a growth of 22.5M and, contrary to last month, was able to increase its market share by a third of a percentage point. nginx had another good […]