Разработчики объявили о выходе Joomla 1.6.1. В этой версии исправлено огромное количество ошибок, некоторые из которых относятся к безопасности. Рекомендую обновиться всем, кто уже начал работать с Joomla 1.6. Список ошибок исправленных в новой версии смотрите далее.
Список взят с официального сайта:
Security
- Moderate Priority - Core - SQL Injection / Interal Path Disclosure.
- Moderate Priority - Core - Path Disclosure.
- Moderate Priority - Core - XSS Vulnerabilities.
- Moderate Priority - Core - XSS Vulnerabilities.
- Low Priority - Core - Information Disclosure.
- Moderate Priority - Core - Redirect Vulnerabilities.
- Moderate Priority - Core - Information Disclosure.
- Low Priority - Core - Unauthorised Access.
- Moderate Priority - Core - CSRF Vulnerabilities.
- Moderate Priority - Core - DOS Vulnerabilities.
- Moderate Priority - Core - XSS Vulnerabilities.
- Moderate Priority - Core - CSRF Vulnerabilities.
Issues Fixed
Category |
Issue Title |
ACL |
group perms list should be expand/collapsible at will |
ACL |
new user group assignement doesn't work |
ACL |
A registered user can change their user name |
ACL |
No save icon in article editor for new article with category level permission |
ACL |
Users with create permission in a category cannot see the image button below the editor |
Administration |
Fix background color in high contrast batch fieldsets |
Administration |
Refresh Cache in Extension Manager: Failed loading XML file |
Administration |
Inconsistent term for User Group |
Administration |
Multiple groups are a problem in the user manager |
Administration |
Improve the cpanel of admin templates + correting some errors |
Administration |
Language fixes and new warnings for com_installer |
Administration |
Templates filter searches all extensions |
Administration |
Improve the Directory Permissions in com_admin |
Administration |
3rd party components install in location "site" instead of "administrator" |
Administration |
*PHP warning in extension manger |
Administration |
Missing messages for some menu item types having no Basic Options |
Administration |
Problems with aliases when there is a menu alias menu type |
Administration |
Alternative Layout Not Implemented in com_search, com_users |
Authentication & Login |
*Issue in back-end login module with Languages not installed in db but present in the admin language folder |
Authentication & Login |
*Multilanguage on and site offline: loggin front-end gets in a loop |
Authentication & Login |
Login form does not use https |
Code Style |
PHP Strict Standards Message, Category Blog |
Code Style |
CRLF instead of LF in some files |
Code Style |
Systematic elimination of DS as directory separator - Round 2 |
Code Style |
Wrong class in kategory list mode |
Components |
Unescaped value should be filtered. |
Components |
Getting 500 errors editing from category blog on front end with default sef on |
Components |
SQL Injection can result in information disclosure |
Components |
com_contact, wrong string is used in config.xml (COM_CONTACT_FIELD_PROFILE_SHOW_LABEL used twice) |
Components |
com_contact view contact links |
Components |
com_newsfeeds doesn't set default view in frontend |
Components |
com_mailto Spam Email Relay |
Components |
SQL error in com_contact if id not set |
Components |
Strict standards: Declaration of WeblinksModelCategory::getItems() should be compatible with that of JModelList::getItems() in |
Components |
Inconsistency in the Add new newsfeed screen |
Components |
Missing tooltip in Web Links Manager |
Components |
*menu items metadata not implemented |
Components |
Link Author option lacks in Archived Articles menu item |
Components |
com_menu not looking for component xml file |
Components |
Details of the components are in different orderings |
Components |
duplicate case in switch in ~/components/com_users/controller.php |
Components |
*Weblinks icon hardcoded |
Components |
*Contacts Category model tries to load params from menu even if no Itemid is set |
Components |
Clicks on a custom banner are not counted |
Components |
*Banners unique alias |
Components |
*Search lower and upper limit do not take into account localise.php settings |
Components |
*Accommodating for longer string value in Banners Edit page |
Components |
com_categories doesn't properly update paths of children categories when moved to a new parent |
Components |
Redirect component does not list 404 errors for missing child page when parent page does exist (patch supplied) |
Components |
Get error after save options for component |
Components |
duplicate code weblink .php |
Components |
*Category Save as Copy does not save with different title/alias |
Components |
*modal_contacts field type problems |
Components |
Joomla displaying error after uploading an image using Media Manager and the path does not stay where it is after the upload |
Components |
Double category strings in URLs |
Components |
A banner with limited impressions will never show |
Components |
Multiselect not implemented in all views |
Components |
Can't display teaser text in full article view. |
Components |
Extra markup in some component views |
Components |
extra closing div in \components\com_weblinks\views\form\tmpl\edit.php |
Database |
Issue with MySQL compatibility in joomla.sql with params fields |
Database |
in sql file bug |
Forms |
Contact form typo - duplicate tag <label> for Email and Message |
Forms |
JHtml select.radiolist produces unnecessary label class suffix |
Forms |
The "Ordering" form field type defaults to "0", causing accidental changes to ordering of plugins, modules, banners, etc (with patch) |
Front End |
Cannot edit a weblink from the frontend |
Front End |
Wrong description language code for email1 field |
Front End |
*Submitting two articles in the same category with the same title but different aliases doesn't work on frontend |
Installation |
Sample data - Wrapper module issue |
Installation |
Installation IE fixes |
Installation |
J!1.6 lacks a remove installation folder screen |
Installation |
com_installer Admin XSS |
Installation |
Sample data links |
Installation |
Javascript error in installation |
Installation |
Internationalisation of sample data options list |
Installation |
*Localise xml default language is not highlighted in the drop down |
Installation |
*Languages not installed in db but present in the language folders in joomla issue |
Installation |
Enabling debug language mode in installation application |
Installation |
Add a button to the installation to remove the installation folder |
Installation |
Improve installation.js |
Installation |
bug: old extension version reported from cache after automatic extension update** |
Installation |
Plugins installed via discover are enabled |
Installation |
Sample Data Typo |
Javascript |
Error parameters formated in tinymce |
Javascript |
None of the JS files have been compressed. |
Javascript |
Don't use the $() function in JavaScript. |
Javascript |
Make some scripts compatible with Mootools 1.3 |
Joomla! Libraries |
Some article code can send JFilterInput into an endless loop |
Joomla! Libraries |
Fatal error: Cannot use object of type stdClass as array in ../libraries/joomla/updater/updater.php on line 108 |
Joomla! Libraries |
response headers show wrong joomla version |
Joomla! Libraries |
Manifest data is not being serialized as JSON during install and discovery install. |
Joomla! Libraries |
Joomla! Web Application Framework library is uninstallable |
Joomla! Libraries |
Library JURI has an optional parameter: it should be mandatory |
Joomla! Libraries |
Unused JDate code causing"Catchable fatal error" |
Joomla! Libraries |
JController class lacks a unregisterTask method |
Joomla! Libraries |
Abort during install of component and module fail due to rollback methods being protected instead of public. |
Joomla! Libraries |
typo in databasequery.php - udpate |
Joomla! Libraries |
Add support for defer/async to JDocument |
Languages |
Hathor status module jtext plurals |
Languages |
Missing Language string Cache Unwritable |
Languages |
MODULES_ERR_XML incorrectly called |
Languages |
Missing language string JLIB_INSTALLER_ABORT_PACK_INSTALLER_COPY_SETUP |
Languages |
Incomplete language strings in Mass Mail |
Languages |
missing translation for COM_WEBLINKS_DEFAULT_PAGE_TITLE |
Languages |
Incorrect language definition in 'List Contacts in a Category' menu item type |
Languages |
Incorrect tooltips in Articles Categories module |
Languages |
Incorrect tooltip in Module Manager |
Languages |
In Bluestork, longer labels are being cut off especially radio button labels |
Languages |
*Extra language definitions for icon tooltips in Messages component |
Languages |
*Incorrect error string after saving default menu item with set 'Default Page' radio button to 'no' value |
Languages |
*No translation of options (plugin names) in ordering field of plugins |
Languages |
Incorrect term in a tooltip in the Menu Items screen |
Languages |
*Incorrect tooltip for the Enabled column in Plug-In Manager |
Languages |
*Incorrect tooltip in News Feed Manager |
Languages |
Incosistency in the Link Author article option |
Languages |
Contact language is ignored in frontend |
Languages |
Untranslated strings TPL_BEEZ5_ISCLOSED and TPL_BEEZ5_LOGO |
Languages |
Debug Language showing up |
Languages |
The strings used for the display column in the module assignment slider are confusing |
Languages |
Cannot Translate Option Values using JForm SQL Field Type** |
Layouts |
Extra div element in Category List for unpublished articles |
Layouts |
Missing class blog_children |
Layouts |
Missing class default_children |
Modules |
*Langswitcher module needed display improvement parameters |
Modules |
New Window without navigation |
Modules |
Backend mod_status private messages pluralisation |
Modules |
mod_articles_category creates wrong html code |
Modules |
Disabling modules on a page leaves error messages |
Modules |
Empty tooltips in module edit screens |
Modules |
Mod popular and latest article processing events in content plugins |
Modules |
*Don't show empty divs in mod_login |
Modules |
Module articles category - fatal error |
Modules |
Articles Category Module Gropu by Author error |
Modules |
Modules do not have Trashed state |
Modules |
Module Banners: "All categories" option does not include all categories |
Modules |
Incorrect ID attribute's value in backend menu |
Modules |
Stripped code in contents and custom html module |
Modules |
JNO/JYES instead JSHOW/JHIDE in mod_weblinks.xml |
Modules |
Missing "parent" css class if menu is collapsed |
Modules |
mod_articles_category generates a PHP warning when using language filter |
Modules |
Fatal error in mod_articles_category when showing readmore |
Modules |
*Duplicated module is published |
Plugins |
Language switcher broken by #24210 |
Plugins |
*debug plugin does not display results if gzip is on |
Plugins |
Update GeSHI to 1.0.8.9 |
Plugins |
If a system plugin tries to load its language file, Joomla! falls back to setting the default site language to English. |
Plugins |
PATCH: Change pagination pagelist |
Plugins |
plg_user_profile "Website" field XSS |
Plugins |
*Detect browser lang and cookie broken when using languagefilter |
Plugins |
*Redundant call to load language in tinymce causes lang load issue |
Plugins |
[#24767] *Detect browser lang and cookie broken when using languagefilter |
Plugins |
Improve the voting plugin |
Plugins |
* Menu manager Multilanguage Deactivate Home |
Plugins |
Alias URL does not work with Language filter plugin active - sef off |
Plugins |
Plugin User-Profile Birthday field alpha entry crashes Profile Fields in Admin |
Plugins |
Upgrade Geshi to 1.0.8.10 |
Plugins |
Upgrade Codemirror to Version 0.94 |
Plugins |
Codemirror update causes improper characters in template html/css editing |
RTL |
*Implementing RTL pagination in beez |
RTL |
*RTL/LTR issues in Beez2 and 5 (News feeds and debug) |
RTL |
breadcrumbs doesn't look good on rtl templates |
RTL |
uppear right toolbar on rtl template isn't align well |
RTL |
*Correcting icon message display in installation with rtl lang |
RTL |
modifying Beez 20 to compatibility with RTL |
RTL |
*modifying Beez5 to compatibility with RTL |
Search Engine Friendly |
Transliteration does not work in Category Manager |
Search Engine Friendly |
Send HTTP result code 503 for the offline page |
Search Engine Friendly |
404 errors when using pagebreak with sef enabled |
Search Engine Friendly |
Remove com_search SEF encoding of search term |
Search Engine Friendly |
Redirect is Not Working with SEF |
Search Engine Friendly |
sef plugin results in a blank page for large content |
Templates |
Missing image in Beez2 and Beez5 |
Templates |
/templates status indicator in backend |
Templates |
Bluestork administrator template template.css typo |
Templates |
In Users, Mass Mail Users, the tooltips are not being styled. |
Templates |
beez template typo with position-15 |
Templates |
Unstyled dialog when clicking 'new' in module manager |
Templates |
Error page styling forces error box to far left |
Templates |
Screens jumps when using the ACL widget |
Templates |
No rounded corners in Opera for Modal |
Templates |
New preview screenshots required for the admin templates |
Templates |
Removes references to non-existing stylesheet |
Templates |
Image j_button2_right.png missing from system template |
Templates |
Remove the border attribute |
Templates |
Typo in media/media/css/popup-imagelist.css (wrong color value for background) |
Templates |
*Debug position in beez 20 template doesn't work. |
Templates |
JS error notices default template in IE7+8 |
Templates |
JS patch for Beez5 - IE issue hide.js |
Templates |
Beez_20 and Beez 5 xml patch |
User Interface |
* Adding a "Location" column in Language Manager |
User Interface |
Administration templates renders JForm "checkboxes" incorrectly in config |
User Interface |
Admin Trashed menu doesn't display - link error |
User Interface |
Trashed articles - no indication of being trashed , when viewed at front of site |
User Interface |
*Contact form in frontend does not display the star for required fields |
User Interface |
Message label incorect showed and inconsistency with coma after labels in Contact form |
User Interface |
*Banners Tracks export modal needs more height |
User Interface |
[patch] Enable editor-xtd buttons to have meaningful tooltips |
User Interface |
*Accommodating longer strings in bluestork page title |
User Interface |
Change "Templates Manager" to "Template Manage" |
User Interface |
* Different Alias fields tooltips |
User Interface |
*Normalise modals UI |
User Interface |
JTRASH instead JTRASHED in jgrid.publishedOptions |
User Interface |
Banner Manager: Banners - increase is needed for colspan of table's footer |
User Interface |
There is no featured button in the tool bar, so no way to make multiple articles featured |
User Interface |
Cannot allow a group to create in a single sub category |
User Interface |
PNG images are not optimized |