Discussion about: Joomla! 1.0.8 Released

[stingrey]

In reference to this:

http://forum.joomla.org/index.php/topic,41181.0.html



Confirmed Bugs discussed here are being split from this thread and moved to the 1.0 Quality & Testing Forum for easier tracking for the Team.

People should check that forum before posting any new bug reports here.



If your post suddenly disappears from this thread, it means it is being shifted to a more appropriate thread, either as a confirmed item here:
1.0 Quality & Testing Forum for easier tracking for the Team.
Or
here
http://forum.joomla.org/index.php/topic,41406.0.html

[reikimaster]

Installed 1.0.7 to 1.0.8 patch first on test machine and then on live site. No issues.

Nice job!

[romit]

Great!!!,

Thanks goes to rey, core dev people and all other stability and testing team people..

[chess]

no issues here either

[Mohammed]

Good work rey !

All my best wishes to the new release !

[wyzemoro]

nice! goodwork!

[stonie10]

Hm, strange.
I did an update from 1.0.7 to 1.0.8, but now I can't get into my ACP anymore 
When I click "Login" I get a blank page (index2.php).
Has anyone else this problem?

Greetz,
stonie10

[Denon]

Hey, all files in patch archive from 1.0.7 to 1.0.8 (tar.gz format) have chmod set to 755..  why not 644??

[duvien]

Excellent work and many thanks for yet another great release.

Sunburst

[ebaby]

Thansk a lot joomla team for new release.
i am going to upgrade it.

best

[focalguy]

Thanks again Joomla! Team

[guardian2k1]

Hey, all files in patch archive from 1.0.7 to 1.0.8 (tar.gz format) have chmod set to 755..  why not 644??

It wouldn't matter what they are, if you are uploading by ftp then the server should change them.  If not, just use Joomlas global permission change.

[JohnWA]

Great work. 

Just upgraded my site. Works fine, except my newsflash content has gone.
When I use the mod_newsflash.php from 1.0.7 (in /modules) all is fine.

Any idea's?

Keep up the good work.

Johnny

[cozimek]

Rey,

As usual, you and your Security team have set the standard for documentation and thoroughness in an open source project.  Thank you for all your hard work and dedication.  We've all really come a long way from just six months ago, and it couldn't have been done with leadership like that of the core team.

Keep up the good work, and thanks again for keeping our sites safe!

Best,
Ryan

[romit]

1.0.8 has some comaptiblity issues with MambelFish 1.5

Error on frontend is this,

Code: Select all

Call to a member function on a non-object in /components/com_mambelfish/mambelfish.html.php on line 62

Error on backend after login is this

Code: Select all

Fatal error: Call to undefined function: initsessionadmin() in /administrator/index2.php on line 38

as posted here,

http://forum.joomla.org/index.php/topic ... #msg223909

[leolam]

Glad that finally loads of security issues as mentioned amongst many others in  this thread have been addressed. I only do not understand why this takes 2 years and people being ridiculed by "others" during that time while silently now dozens of those mentioned issues in that thread and all the threads in the two years before are now suddenly being addressed in the new release...interesting to say the least! Thank you for finally listening!

Leo

[Beat]

Confirming that it seems that a new very pleasant wind is blowing in Joomla-Towers.

Contacts with the core team is very pleasant and open.

Trail tried to bring up the duplicate ad timing-out sessions issue in August and Sept 2004 at mambo, but didn't get the attention deserved at that time.

Now all is fixed and we are all very happy with the new communication opennes-mind of the core team. Looking forward to great times :P

Thanks a lot, Rey, Johan, Louis, and the others for your open and cooperative mindset.

[dhuelsmann]

• News feeds now not working with implementation of Joomla 1.08. Any insights on that issue?
• Voting doesn't work (returns you to frontpage) with OpenSEF enabled. Works fine if SEF enabled and OpenSEF disabled.

Dave

[stingrey]

Glad that finally loads of security issues as mentioned amongst many others in  this thread have been addressed. I only do not understand why this takes 2 years and people being ridiculed by "others" during that time while silently now dozens of those mentioned issues in that thread and all the threads in the two years before are now suddenly being addressed in the new release...interesting to say the least! Thank you for finally listening!

As I stated in the thread you reference.
In the time I have been with Mambo and Joomla! I have never read any specific post or any bug tracker report that reported such a vunerability, and for quite a long time I have monitored many forum threads and been heavily involved in tracking the tracker.  As soon as I confimred the issue existed concreate steps were taken to identify the extent of the issue and to address it.

Unless by some wierd logic people believe that we would willing ignore security vunerabilities then such insituation is unnecessary and inflamatory.

Further I do not see how we are supposedly now addressing this silently.  We have made available to the community a 14 page Security Audit that fully discloses the vulnerabilities discovered.  Not to mention it is clearly stated in the Changelog and the Release report about the vulnerabilities found

[leolam]

I have made available to the community a 14 page Security Audit that fully discloses the vulnerabilities discovered.  Not to mention it is clearly stated int eh Changelog and the Release report the vulnerabilities found

for which we are definitely greatful without any doubt.

Leo

[eyezberg]

There's one thing that I'm wondering about:
it says in the upgrade instructions

Upgrading from any version of Joomla! 1.0.x to 1.0.8, simply involves overwriting your current sites files, with the files in the proper Patch Package that applies to your site.

But I seem to remember in the article about the new admin session lifetime, that there is now a new param in Global Config for that, defaulting to 900..? (dev site not accessible as I post, so can't check).

So question is: how can this default value be set, if all I do is upload (and thus maybe replace) some files, as I take it config won't be overwritten by the patch? How does the system know this value exists if I do not open Global Config and save or apply (or: how does this var/value ever get written?).. just wondering.. I might be tired..

[toubkal]

thats a very good point, I have already been into the global config in the admin and changed a setting and saved so I cannot say what it was like just after the upgrade, but when I look now, I now have 2 new lines in my configuration.php

Code: Select all

$mosConfig_session_life_admin = '1800';
$mosConfig_session_type = '1';

Surely you are right, if I had not been into the settings and saved, these could not have been written to the file?

[ot2sen]

Thanks for another great version of Joomla! 1.0.x !

Newsfeeds that was problematic in 1.0.7 is working fine in the new 1.0.8.
Only thing noticed so far is related to mosCE, but thats for Ryan to fix. 

Really like the ever improving informational level, this time with a series of articles describing changes and fixes - great, thanks !

[medy]

Hello, I noticed an issue with Joomla 1.0.8 and mosCE editor. Popups windows dont show content (smileys, insert/edit image...) and an error notice occurs when clicking on image manager, insert flash, insert file link...The error message goes:

Code: Select all

Fatal error: Call to a member function on a non-object in /home/eparticipacija/public_html/includes/joomla.php on line 802

the 802 line in joomla.php is:

Code: Select all

function sessionCookieName() {
		global $mainframe;
		
		return md5( 'site' . $mainframe->getCfg( 'live_site' ) ); ------------------------- line 802		
	}

advices and suggestion are appreciated

[cinder]

Great work. 

Just upgraded my site. Works fine, except my newsflash content has gone.
When I use the mod_newsflash.php from 1.0.7 (in /modules) all is fine.

Any idea's?

Keep up the good work.

Johnny

Same here.  I also replaced the 1.0.8 mod_newsflash.php with the older 1.0.7 version and the News Flashes are showing again.  Other than that, it looks like everything else upgraded without a glitch.

[scorpi1in]

Hi,

I ugraded my site from ver 1.0.7 to 1.0.8, but now I am getting javascript error in 'Administration' panel on evry page. It gives 'Object Expected' error. I am not able to make any changes in my current module and other stuff.

I dunno what went wrong while upgrading...

[Gredalkin]

• News feeds now not working with implementation of Joomla 1.08. Any insights on that issue?
• Voting doesn't work (returns you to frontpage) with OpenSEF enabled. Works fine if SEF enabled and OpenSEF disabled.

To solve the 2nd problem try to change opensmf configuration to "enforce canonical urls = NO"
I had problems with registering and retrieving passwords, always kicking me pack on the index page. That small modification fixed my problem.
I hope it works for you, too.

Unfortunately I also have a problem with MosCE now, just like medy reported. Exactly the same error. There is also a thread in the MosCE forum but no answer yet. Help would be appreciated...

[was_nun?]

Hi there!

I upgraded from 1.0.7 to 1.0.8 just now. Everything works fine except for one thing. When I open my contact section there used to be a dropdown menu to show all entries. Well, the menu is still there, but it became very small and it is empty although there are serveral entries in the backend... and ideas how to solve this little problem? 

Thanks for your great work on joomla! 

Cheers!

was_nun?

[cozimek]

Only thing noticed so far is related to mosCE, but thats for Ryan to fix. 

Hey ot2sen,

What's the problem with the mosCE and 1.0.8.  Before we migrate our sites, all that use mosCE, I'm interested in hearing what happens with mosCE and 1.0.8.

Best,
Ryan O. (not Ryan D. =) )

[dhuelsmann]

• News feeds now not working with implementation of Joomla 1.08. Any insights on that issue?
• Voting doesn't work (returns you to frontpage) with OpenSEF enabled. Works fine if SEF enabled and OpenSEF disabled.

To solve the 2nd problem try to change opensmf configuration to "enforce canonical urls = NO"
I had problems with registering and retrieving passwords, always kicking me pack on the index page. That small modification fixed my problem.
I hope it works for you, too.

Unfortunately I also have a problem with MosCE now, just like medy reported. Exactly the same error. There is also a thread in the MosCE forum but no answer yet. Help would be appreciated...

Thanks for the suggestion. Tried it and it made no difference with voting and OpenSEF enabled. Looks like I will have to keep it disabled for now.

Dave