Urgent: exact patch to "[20151201] Remote Code Executable"?

[yann180]

Hello,

I have an older 1.5.22 that has been modified fairly extensively, so now I'm stuck and I can't easily upgrade. Can someone point me to the software commit (the patch, the changes) that fixed only this critical vulnerability? I'm a software developer, I can apply the patch by myself once I find it. The 3.4.6 patch contains a lot more stuff, so I'd really like to find the commit that fixes this particular issue, rather than a version patch with multiple issues.

Thanks for your help!

Yan

(talking about this issue: https://developer.joomla.org/security-c ... ility.html )

[deleted user]

All security fixes are always applied as a single commit when preparing a release. In the case of 1.5, there is a separate patch available as listed in the release announcement at https://www.joomla.org/announcements/re ... eased.html

[yann180]

Thanks a lot, got it. Appreciated.

Yan

[leolam]

I'm a software developer,

You should know thn tht you always need to make sure that you are on latest version and in the (So many years EoL) J1.5-branch you should immediately update to latest 1.5.26 and very rapidly migrate to Joomla 3.4.8

Leo