Discussion about: Upgrade to Joomla! 1.0.10 Security Release

A place to discuss recent announcements made by the Joomla! Core Team. Let's hear what you have to say.
Locked
User avatar
stingrey
Joomla! Hero
Joomla! Hero
Posts: 2756
Joined: Mon Aug 15, 2005 4:36 pm
Location: Marikina, Metro Manila, Philippines
Contact:

Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by stingrey » Mon Jun 26, 2006 5:10 am

In reference to this:

Upgrade to Joomla! 1.0.10 Security Release
http://forum.joomla.org/index.php/topic,71966.0.html
Rey Gigataras
http://www.wizmediateam.com <-- great team of talented Web Designers and Programmers!
http://about.me/reygigataras <-- About Me :)
Partner, Business Development & Project Manager, Event Manager, Sports Coach :D

User avatar
stingrey
Joomla! Hero
Joomla! Hero
Posts: 2756
Joined: Mon Aug 15, 2005 4:36 pm
Location: Marikina, Metro Manila, Philippines
Contact:

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by stingrey » Mon Jun 26, 2006 5:17 am

Just to prempt anyone pointing this out, yes we are aware that the pic on the site still says Download Joomla! 1.0.9, this will be updated as soon as the new images are available - I cant Andy our graphic maestro on the wrong side of timezones.
Rey Gigataras
http://www.wizmediateam.com <-- great team of talented Web Designers and Programmers!
http://about.me/reygigataras <-- About Me :)
Partner, Business Development & Project Manager, Event Manager, Sports Coach :D

theslamforevryone
Joomla! Apprentice
Joomla! Apprentice
Posts: 35
Joined: Sun Mar 12, 2006 5:51 pm

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by theslamforevryone » Mon Jun 26, 2006 5:32 am

Errr. I hope this doesnt break my bridge to SMF and will need several new changes....AGAIN.

User avatar
infograf768
Joomla! Master
Joomla! Master
Posts: 19133
Joined: Fri Aug 12, 2005 3:47 pm
Location: **Translation Matters**

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by infograf768 » Mon Jun 26, 2006 5:39 am

theslamforevryone wrote: Errr. I hope this doesnt break my bridge to SMF and will need several new changes....AGAIN.
As usual, it is always advised to test on a backup...
Jean-Marie Simonet / infograf
---------------------------------
ex-Joomla Translation Coordination Team • ex-Joomla! Production Working Group

User avatar
shacker
Joomla! Explorer
Joomla! Explorer
Posts: 310
Joined: Fri Aug 19, 2005 3:50 pm
Contact:

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by shacker » Mon Jun 26, 2006 5:58 am

Joomla_1.0.9_to_1.0.10-Stable-Patch_Package is full version.

thanks
Desarrollo y Downloads para Joomla!
http://www.joomlaspanish.org
Joomla! Spanish 2005-2009 + de 1.000.000 de descargas

http://joomlacode.org/gf/project/spanish/

User avatar
cybersalt
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 126
Joined: Thu Aug 25, 2005 10:36 pm
Location: Victoria, Canada
Contact:

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by cybersalt » Mon Jun 26, 2006 6:01 am

I think there is a mistake on the page you download the Joomla Packages - both the full version and the upgrade are 2 megs in size - or at least the links read that way.

Tim
Tim Davis
Cybersalt | Basic Joomla Tutorials
https://www.cybersalt.com | https://www.[youtube].com/basicjoomla

User avatar
stingrey
Joomla! Hero
Joomla! Hero
Posts: 2756
Joined: Mon Aug 15, 2005 4:36 pm
Location: Marikina, Metro Manila, Philippines
Contact:

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by stingrey » Mon Jun 26, 2006 6:06 am

There does indeed appear to be a problem with joomla_1.0.9_to_1.0.10-Stable-Patch_Package

We are attempting to find the problem in our autopackage creator.
The correct files will be uploaded when they become available - apologies.
Rey Gigataras
http://www.wizmediateam.com <-- great team of talented Web Designers and Programmers!
http://about.me/reygigataras <-- About Me :)
Partner, Business Development & Project Manager, Event Manager, Sports Coach :D

User avatar
brian
Joomla! Master
Joomla! Master
Posts: 12787
Joined: Fri Aug 12, 2005 7:19 am
Location: Leeds, UK
Contact:

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by brian » Mon Jun 26, 2006 6:12 am

Just to let you know in case you arent already aware that some of the other version upgrades are 0k in size
"Exploited yesterday... Hacked tomorrow"
Blog http://brian.teeman.net/
Joomla Hidden Secrets http://hiddenjoomlasecrets.com/

User avatar
ericguttormson
Joomla! Apprentice
Joomla! Apprentice
Posts: 44
Joined: Tue Jun 06, 2006 3:32 am

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by ericguttormson » Mon Jun 26, 2006 6:14 am

stingrey wrote: There does indeed appear to be a problem with joomla_1.0.9_to_1.0.10-Stable-Patch_Package

We are attempting to find the problem in our autopackage creator.
The correct files will be uploaded when they become available - apologies.
I uploaded the files to my server and had Cpanel unpackage them and everything seemed to go just fine. (that's a great way to do an upgrade by the way).

My Jooma says I am running 1.0.10 so I should be "good to go" correct?

AmyStephen

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by AmyStephen » Mon Jun 26, 2006 6:15 am

Thanks, Rey! Appreciate all your attention and hard work on this. 

User avatar
TomT
Joomla! Ace
Joomla! Ace
Posts: 1324
Joined: Thu Aug 18, 2005 5:50 am
Location: Amsterdam
Contact:

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by TomT » Mon Jun 26, 2006 6:28 am

I get this error when I try to download an update patch:
A SourceForge system error has occurred. An unexpected system error has occurred

If you feel you have received this message in error, please contact the SourceForge administrator and reference this tracking number: exid4223FAE9010C0F00502D4784

syair
Joomla! Fledgling
Joomla! Fledgling
Posts: 4
Joined: Mon Nov 21, 2005 4:47 pm

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by syair » Mon Jun 26, 2006 6:38 am

I have upload all file in Joomla_1.0.9_to_1.0.10-Stable-Patch_Package.tar.bz2 but my version still 1.0.9
...
Joomla! Version:    Joomla! 1.0.9 Stable [ Sunshine ] 05 June 2006 16:00 UTC
...

User avatar
ericguttormson
Joomla! Apprentice
Joomla! Apprentice
Posts: 44
Joined: Tue Jun 06, 2006 3:32 am

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by ericguttormson » Mon Jun 26, 2006 6:41 am

I wonder why mine worked and everyone else is having trouble.

Now I'm worried.  :-\

Did anyone else succesfully make the upgrade using the patch?

I used the file.... Joomla_1.0.9_to_1.0.10-Stable-Patch_Package.tar.gz

User avatar
infograf768
Joomla! Master
Joomla! Master
Posts: 19133
Joined: Fri Aug 12, 2005 3:47 pm
Location: **Translation Matters**

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by infograf768 » Mon Jun 26, 2006 6:46 am

I guess all of you should be a little bit more patient.
Rey is taking care of the packages.
Jean-Marie Simonet / infograf
---------------------------------
ex-Joomla Translation Coordination Team • ex-Joomla! Production Working Group

sideiron
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Sat Sep 17, 2005 1:57 am

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by sideiron » Mon Jun 26, 2006 7:09 am

I've just done the download of version 1.0.9 to 1.0.10 upgrade and it all worked fine.

So that's me and you both ericguttormson!

User avatar
SniperSister
Joomla! Apprentice
Joomla! Apprentice
Posts: 36
Joined: Fri Sep 16, 2005 11:20 am
Location: Cologne (Germany)
Contact:

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by SniperSister » Mon Jun 26, 2006 7:12 am

Hey guys,

i'm happy to see, that it seems like that the access problems with the archive are fixed. Apparently it's now possibile to view the archive without being an administrator. But i think i found a bug: I can't adjust the number of colums, the number of leading items or links using the parameter in the backend. The archive ignores the values I'm entering into the parameters..

Best regards,
Snipy
Joomla! Community Leadership Team

User avatar
infograf768
Joomla! Master
Joomla! Master
Posts: 19133
Joined: Fri Aug 12, 2005 3:47 pm
Location: **Translation Matters**

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by infograf768 » Mon Jun 26, 2006 7:46 am

SniperSister wrote: Hey guys,

i'm happy to see, that it seems like that the access problems with the archive are fixed. Apparently it's now possibile to view the archive without being an administrator. But i think i found a bug: I can't adjust the number of colums, the number of leading items or links using the parameter in the backend. The archive ignores the values I'm entering into the parameters..

Best regards,
Snipy
I do not have this Blog Content Category archive menu item problem here.
Parameters are changed as desired.
Jean-Marie Simonet / infograf
---------------------------------
ex-Joomla Translation Coordination Team • ex-Joomla! Production Working Group

User avatar
SniperSister
Joomla! Apprentice
Joomla! Apprentice
Posts: 36
Joined: Fri Sep 16, 2005 11:20 am
Location: Cologne (Germany)
Contact:

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by SniperSister » Mon Jun 26, 2006 7:57 am

infograf768 wrote: I do not have this Blog Content Category archive menu item problem here.
Parameters are changed as desired.
I found out that the problem only appears when OpenSEF is activated, so i would say it's not a Joomla!-problem...

great work@Joomla Team!

Snipy
Joomla! Community Leadership Team

prad.dso
Joomla! Apprentice
Joomla! Apprentice
Posts: 6
Joined: Fri Jun 09, 2006 1:57 pm

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by prad.dso » Mon Jun 26, 2006 8:06 am

Rey Please let us know when its ok for the packages to be downloaded. I just read there was something wrong related to the packages...When things settle down and the packages are Ok to be downloaded, let us know here...

Every new version of joomla is like manna from the heavens  :)

Peter Koch
Joomla! Explorer
Joomla! Explorer
Posts: 374
Joined: Thu Aug 18, 2005 8:54 pm

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by Peter Koch » Mon Jun 26, 2006 8:07 am

The patch to make content settings work on frontpage and in blog views is available for download.

(Note: This issue with non-working settings is not considered as a bug, but as intended behaviour by the joomla devs)

User avatar
stingrey
Joomla! Hero
Joomla! Hero
Posts: 2756
Joined: Mon Aug 15, 2005 4:36 pm
Location: Marikina, Metro Manila, Philippines
Contact:

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by stingrey » Mon Jun 26, 2006 8:11 am

prad.dso wrote: Rey Please let us know when its ok for the packages to be downloaded. I just read there was something wrong related to the packages...When things settle down and the packages are Ok to be downloaded, let us know here...
All package files are ok for use apart from the:
Joomla_1.0.9_to_1.0.10-Stable-Patch_Package

The package actually just contains a Full 1.0.10 package, minus the installation folder.


Even then there is nothing wrong with using tge Full Package to upgrade a 1.0.9 site.
In fact we use the Full Package for upgrading all the 6 official Project Joomla! sites.
Rey Gigataras
http://www.wizmediateam.com <-- great team of talented Web Designers and Programmers!
http://about.me/reygigataras <-- About Me :)
Partner, Business Development & Project Manager, Event Manager, Sports Coach :D

User avatar
yonex_nl
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 228
Joined: Tue Dec 13, 2005 7:44 pm
Location: Susteren, Nederland
Contact:

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by yonex_nl » Mon Jun 26, 2006 8:29 am

I created a 1.09 to 1.10 patch package by comparing 1.08 to 1.10 patch package with 1.09 full package.

EDIT: Great work Rey. I just removed my 'custom made' package.
Last edited by yonex_nl on Mon Jun 26, 2006 9:08 am, edited 1 time in total.

User avatar
chay
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 175
Joined: Wed Aug 17, 2005 11:20 pm
Location: Alaska
Contact:

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by chay » Mon Jun 26, 2006 8:36 am

I upgraded five sites from 1.0.9 to 1.0.10. It overwrote my favicons. Oops. Didn't take long to fix that, though. Everything else seems fine so far. Thanks!

User avatar
stingrey
Joomla! Hero
Joomla! Hero
Posts: 2756
Joined: Mon Aug 15, 2005 4:36 pm
Location: Marikina, Metro Manila, Philippines
Contact:

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by stingrey » Mon Jun 26, 2006 8:44 am

Ok the Joomla_1.0.9_to_1.0.10-Stable-Patch_Package files are now fixed and corrected on the forge.


Apologies for the slight hiccup and thanks to Sam our server/packager expert for getting to it and fixing it so quickly.
Last edited by stingrey on Mon Jun 26, 2006 8:48 am, edited 1 time in total.
Rey Gigataras
http://www.wizmediateam.com <-- great team of talented Web Designers and Programmers!
http://about.me/reygigataras <-- About Me :)
Partner, Business Development & Project Manager, Event Manager, Sports Coach :D

gws
Joomla! Champion
Joomla! Champion
Posts: 5947
Joined: Tue Aug 23, 2005 1:56 pm
Location: South coast, UK
Contact:

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by gws » Mon Jun 26, 2006 10:46 am

Just upgraded 5 sites on three different servers with no apparent problems. So well done Joomla Team.

Heart
Joomla! Intern
Joomla! Intern
Posts: 50
Joined: Fri Aug 19, 2005 11:42 am
Location: near Munich

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by Heart » Mon Jun 26, 2006 11:23 am

When I try to login (frontend, after I did the 1.0.9 to 1.0.10 upgrade) I get

"You are not authorized to view this resource"

(...on two of my sites.... see also in german forum
...)
Regards,
Heart

User avatar
Wizzie
Joomla! Hero
Joomla! Hero
Posts: 2701
Joined: Tue Sep 06, 2005 4:37 am
Location: Australia
Contact:

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by Wizzie » Mon Jun 26, 2006 11:29 am

Heart wrote: When I try to login (frontend, after I did the 1.0.9 to 1.0.10 upgrade) I get

"You are not authorized to view this resource"

(...on two of my sites.... see also in german forum
...)
I have the same problem but I was upgrading from 1.0.7. But could log into the backend. After deleting all cookies for the site and I can no longer log into backend. When I try to login it goes to index2.php but then switches to index.php?mosmsg=You%20need%20to%20login.

User avatar
Lt. Columbo
Joomla! Apprentice
Joomla! Apprentice
Posts: 41
Joined: Wed Mar 15, 2006 8:41 pm
Location: England
Contact:

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by Lt. Columbo » Mon Jun 26, 2006 11:51 am

Hi All..!
:)

About all this,... what can I say?
Exept the old, but true...: Do ALWAYS make a backup of ALL your files and DB before applying a patch! (especially this one!)

I just watched a friend do it on his website (we both run on the same host, same cluster, full control of config etc. etc. and are both pretty experienced in using Joomla!) and it worked fine! Just fine! No issues.

After watching that, I figured that I could just apply it to my own site - and I should never have done that!
I got a massive error-message... something about a "spoof-attack", parse error-this and parse-error that.... it was like 10 lines of error code, and I lost access to backend and frontend - totally!
:'(

I had to fix it by manually copy files from the 1.0.9. patch package and single files from another site I have running 1.0.9.
Among others, "mod_fullmenu.php" refused to work from any package, and gave me a parse-error.

So everybody.... !
This fix is great news - if it runs on your site!
But, I repeat, ALWAYS make a backup of ALL your files!

I thought I've learned,.... now i HAVE !
:-[
Best regards
Lt. Columbo.

yannisc
Joomla! Fledgling
Joomla! Fledgling
Posts: 3
Joined: Wed Mar 01, 2006 10:37 pm

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by yannisc » Mon Jun 26, 2006 11:55 am

Could we have the language file changes so we can upgrade existing translation files?

johnniefp
Joomla! Fledgling
Joomla! Fledgling
Posts: 4
Joined: Wed Sep 07, 2005 10:11 am

Re: Discussion about: Upgrade to Joomla! 1.0.10 Security Release

Post by johnniefp » Mon Jun 26, 2006 11:55 am

Upgraded using Joomla_1.0.8_to_1.0.10-Stable-Patch_Package.tar

All my List - Content Section in my menu showed no content when clicked, a fix was to Edit Menu Item :: List - Content Section and then just apply (no changes to page were necessary)

John


Locked

Return to “Announcements Discussions”