Joomla! Forum - community, help and support

Discussion of: http://forum.joomla.org/viewtopic.php?f=8&t=511623

pe7er wrote:The Development Working Group's goal is to continue to provide regular, frequent updates to the Joomla community.

Bet they didn't plan for it to be this frequent!

Thanks to those that worked hard to get this update out the door! Glad it was so quickly responded to and released!

You guys ROCK!

The dowload link for the full package isn`t working, I am getting this error

Invalid parameters supplied

The patches downloaded fine

I downloaded both successfully earlier today using firefox 3.6, I will go test again.

I can confirm you are correct:

Invalid parameters supplied

When clicking on the full install link from the announcement

Robert_Vining wrote:I can confirm you are correct:

Invalid parameters supplied

When clicking on the full install link from the announcement

I can't replicate this. Perhaps this was the error given while I was updating joomla.org to 1.5.17

I just tried again, using chrome & IE, still getting Invalid parameters supplied

Ok.. now I see.. sorry.. I was looking at the links in the release announcement.

it just worked for me

dsrpmedia wrote:it just worked for me

Yes, I fixed up the link

brad wrote:

dsrpmedia wrote:it just worked for me

Yes, I fixed up the link

Thank you Brad.

Its working fine.
Thanx for new updates.

i upgraded to joomla 1.5.17 last night.
today i came to work to a hacked site. Here' s a screenshot:

has this happened to anyone else?

disregard the last post. according to the logs Ive updated the hack was done on .16 not .17

i guess it shows how important this latest update is

Out of curiosity, what software you using there?

Bulk Import / Ck Forms / Jom Comment / JoomlaPack / RsForm Pro / Sh404sef / Update Manager

I was more reffering to your editor program. Been looking for a good one...

But the Joomla information is good too

ah yes. notepad++

http://notepad-plus.sourceforge.net/uk/site.htm

d3vlabs wrote:.

do this http://forum.joomla.org/viewtopic.php?f=432&t=475313 and pop to security forum

About an hour ago but I have upgrade to 1.5.1917 error:
Fatal error: Cannot redeclare class mosPageNav in /home/XXXXX/public_html/plugins/system/legacy/pagination.php on line 136
I await your attention.
Regards
Pepe

try disabling legacy plugin for starters?

Hello Mandvillle, thanks for your reply, the error is Jom Comment Sys, looking then updated.
Regards
Pepe

What are we going to do about the *feature* that auto-disables any plugin that throws an fatal error, rendering specific functions unusable, experiencing unexpected behavior or worst case the site could go down. (example recent upgrade JED to Joomla 1.5.17 where core plugins were unpublished for unknown reasons?)

This has been identified as a major issue in Joomla 1.5.16/17 and has not yet been addressed here on this platform.

Top Notch developers as former Core Team Lead Developer Johan Janssens are advising NOT to upgrade to Joomla 1.5.16/15.17 (http://blog.joomlatools.eu/2010/05/advi ... oomla.html)

This is deadly serious and needs to be addressed IMMEDIATELY by the Joomla Team publicly! and not confined to those who happen to know the links such as http://joomlacode.org/gf/project/joomla ... m_id=19859

I like to receive formal advise if we need to roll back to Joomla 1.5.15 or Joomla rapidly turns around the situation, rolls back and releases Joomla 1.5.18 including a roll-back as a remedy for this issue?

Leo

Hi,

I was about to upgrade an existing Joomla! site but reading this, I'll hold off on that. I'd like to add a +1 to Leo's request to seriously consider releasing a patch or a new release all together.

If that is not going to happen, can someone from the dev or bug squad suggest a way to patch that changed file? Thanks.

As can be seen at the joomlacode tracker link from above the developers and bugsquad already have attention to this issue.

Until they suggest/propose other than usual practice, the advice should still read, please use latest stable ~ 1.5.17 currently. Especially when former releases are tagged 'Security release'

Hi Ole,

Thanks for the advise, I'll keep an eye on any news about this. I'll leave that upgrade decision to the client/owner of the site.

We run Joomla 1.5.17 on all the official www.joomla.org and *.joomla.org sites.

Just assuring the public that while there may well be an issue that the developers are looking into, 1.5.17 is still the release you should be running, for security reasons alone.

d3vlabs wrote:Bulk Import / Ck Forms / Jom Comment / JoomlaPack / RsForm Pro / Sh404sef / Update Manager

I noticed Ck Forms on you list of installed extensions. It was mentioned on the February, March 2010 Reported Vulnerable Extensions list. There is a link to an update there.

If that's not found to be the cause of your site getting hacked, follow mandville's suggestion above. (and post back to the Security forum)

Hope that helps!

Thank you Ole for the reply

Leo

Leo, it might not be as simple as rolling back the patch, because I think we need to investigate the possibility that it's actually revealing a deeper problem that has hitherto gone unnoticed (I've just got one of those funny feelings about it). I realise some people are extremely concerned but I'm not confident we have all the facts about the matter. The good news is it would appear we have some of the best minds in the community willing to throw some resources at this issue and I'm sure we'll make the best and informed decision with clear and calm heads