Joomla Security Update 1.5.6

Details

Published on Wednesday, 13 August 2008 07:44

This is a quick turnaround security release to address a high level security issue and it is recommended all users upgrade immediately. This affects J1.5 users only.


Download the Joomla 1.5.6 full package now

Download update packages

To use the update packages:

1. Backup your site files and database before proceeding!!!
2. Upload the appropriate compressed patch package file for your current version of Joomla. Upload this file to the root of your Joomla site. (same directory as the administrator folder is in)
3. Use the "extract" feature of the cPanel File Manager to unpack the patch package.
The package contains only the files that have changed, so only those files will be overwritten.

If you need help please contact me.
Jeremy Short

The Joomla! community is pleased to announce the immediate availability of Joomla! 1.5.6 [Vusani]. This is a quick turnaround security release to address a high level security issue and it is recommended all users upgrade immediately.

For more information about this exploit, click here to visit the Joomla Security Blog.

Instructions

• New installation
• Upgrade from an existing Joomla! 1.5 version
• Migration from Joomla! 1.0.x
• See below for manual installation instructions

Download the Joomla 1.5.6 full package now

Download update packages

Release Notes

• SECURITY [HIGH] Fixed security hole in reset logic to check for proper token length.

Manual Installation

Download the Joomla! 1.5.6 Security Patch changed files only

For some users a manual installation of the 1.5.6 Security Patch is a faster process. To manually apply the 1.5.6 Security Patch, upload the following files, replacing the existing files:

		components/com_user/models/reset.php
changelog.php
includes/framework.php
administrator/includes/framework.php
libraries/joomla/version.php
libraries/joomla/environment/uri.php

This patch will only update installations of Joomla 1.5.5. If you're using an earlier version, it is recommended you update prior to updating these files.