Joomla 2.5.10 has been released.

Notable in this build is the inclusion 7 low and medium priority security patches for information disclosure, XSS, DOS and privilege escalation vulnerabilities affecting versions 2.5.9 and earlier versions of 2.5.

38 items from the bug tracker were also addressed.

Full details can be found in the official 2.5.10 release announcement at joomla.org

Since this release improves security, we recommend that all users perform an Joomla upgrade immediately.

A Joomla upgrade can be performed directly in the Joomla administrative backend. For users with multiple sites, we recommend updating all your sites from Watchful.li — a centralized site manager for Joomla.

If you’re serious about performing Joomla updates to keep your site safe and secure, than you’ve probably heard about Watchful.li.

Watchful is a remote backup, update and monitoring service for Joomla web sites and we’ve been rapidly expanding and adding features.

As you can see in the video above, our latest addition is the ability to update all the compatible extensions on your site with just a single click.

You can read more about this new feature in the official announcement.

Joomla 2.5.9 has been released.

Notable in this build is the inclusion of a low priority security patch for an information disclosure vulnerability affecting versions 2.5.8 and earlier versions of 2.5.

22 items from the bug tracker were also addressed.

Full details can be found in the official 2.5.9 release announcement at joomla.org

Since this release improves security, we recommend that all users perform an Joomla upgrade immediately.

A Joomla upgrade can be performed directly in the Joomla administrative backend. For users with multiple sites, we recommend updating all your sites from Watchful.li — a centralized site manager for Joomla.

In the past few years, Joomla has shifted from an ad hoc to a time-based release schedule with a new version were released every 6 months.

The first two release are called Standard Term Support (STS) releases and are supported for 6 months.

Every third release in this cycle is called a Long Term Support (LTS) release. An LTS release is intended to be very stable and is supported until the next LTS is released.

This gives each major Joomla version a lifetime of approximately 18 months. For most users, a Joomla upgrade is recommend only from one LTS to another LTS.

While this is a great improvement over the earlier ad hoc release "schedule", there are 2 main issues with this approach:

  1. Many site builders have expressed frustration that 18 months was too short a window to realistically expect sites to be updated, especially for client work.
  2. The Production Leadership Team or PLT who are responsible for creating and maintaining Joomla releases have noted that under the the current system, the LTS release has too many modifications.

Changes to the Joomla upgrade cycle

At the 2012 Joomla World Conference, the PLT met and addressed these issues by proposing an additional STS release to the Joomla upgrade cycle. The new release schedule would then consist of three STS releases followed by a LTS release.

Joomla 2.5.8 has been released.

Notable in this build is the inclusion of a security patch for a clickjacking vulnerability affecting versions 2.5.7 and earlier versions of 2.5.

6 items from the bug tracker were also addressed.

Full details can be found in the official 2.5.8 release announcement at joomla.org

Since this release improves security, we recommend that all users perform an Joomla upgrade immediately.

A Joomla upgrade can be performed directly in the Joomla administrative backend. For users with multiple sites, we recommend updating all your sites from Watchful.li — a centralized site manager for Joomla.

 
 

Get the latest updates on our extensions