The Joomla! Project is pleased to announce the release of Joomla 5.1.3 and 4.4.7. This is a security and bug fix release for the 5.x and 4.x series of Joomla.
This release continues Joomla’s high standards in accessible web design, highlighting Joomla's values of inclusiveness, simplicity and security into an even more powerful open-source web platform.
Security Fixes
- [20240805] - Core - XSS vectors in Outputfilter::strip* methods
- [20240804] - Core - Improper ACL for backend profile view
- [20240803] - Core - XSS in HTML Mail Templates
- [20240802] - Core - Cache Poisoning in Pagination
- [20240801] - Core - Inadequate validation of internal URLs
Please note: the security fixes include two behaviour changes that might affect existing sites. For more information see the 5.1.3 release FAQ page.
Bug fixes and Improvements with 5.1.3
- Update TinyMCE to version 6.8.4 (#43808)
- Fix attachment handling in Mail class (#43828)
- Delete Schema.org data after deleting an item (#43839)
- Remove testing channel from CLI (#43764)
- Fix frontend language multilingual without compatibility plugin (#43791)
- Remove unneeded variables (#43763)
- ModalSelect: Fix missing token (#43745)
- Fix secure flag for session cookies (#43882)
- Fix encoding in popup links (#43874)
- Fix header translation for modal select fields (#43878)
- Fix Javascript error for radio buttons in sublayout (#43804)
- Fix relative URLs in private messages (#43897)
The full list on GitHub is here: https://github.com/joomla/joomla-cms/milestone/130?closed=1
What’s shipped with 4.4.7?
- Bugfixes
The full list on GitHub is here:https://github.com/joomla/joomla-cms/milestone/129?closed=1
Where can I download Joomla 5.1.3?
On the Downloads site, of course :)
New Installations
New installation instructions and technical requirements
Upgrade
Where can I download Joomla 4.4.7?
Upgrade
Would you like to make a tour of Joomla 5 without having to install it? We have a solution for you: Try Joomla 5.1 at launch.joomla.org
Still have sites on Joomla 3.x?
Then there is a commercial security release, 3.10.17-elts.
https://elts.joomla.org/release-notes
How can I upgrade my site to Joomla 5?
Good news for Joomla 4.4.x to 5.x, it’s an upgrade, not a migration. Why? Two main reasons:
- Joomla 4 (J4) extensions that have removed all deprecations of code and are using up-to date Joomla code, will work in Joomla 5 (J5)
- Most others will work with the new Behaviour - Backward Compatibility Plugin enabled
The full details are found here: https://docs.joomla.org/Joomla_4.4.x_to_5.x_Planning_and_Upgrade_Step_by_Step
Note: we advise you to first test the upgrade on a copy of your production site.
You may also wonder if you have to migrate ASAP. You can take your time; we’ll support 4.4 for 2 more years. So your site is not at risk if you don’t upgrade now. And don’t forget that some of your extensions may not be yet ready for Joomla 5 (even though most developers have done a great job offering a Joomla 5 test version for a while. You can filter by version in the Joomla Extensions Directory so you can see which are ready for J5 and which are J5 ready with the b/c plugin enabled.
Joomla 5.1.3 is out. Make some noise!
Let the world know Joomla 5.1.3 is released.
Use the hashtag #Joomla5, share the Joomla 5 video, send the Joomla 5 landing page to your clients or add it to your pro site.
What about Joomla 4.4?
Joomla 4.4 has no new features. But it is required for you to be able to upgrade from Joomla 4.x to Joomla 5.x
It contains updates to allow for a smoother upgrade path but no new features.
Who is Joomla! for?
Web agencies, large and small companies, online shops, bloggers, communities, and all kinds of organisations (for example, NGOs, schools, charities and governments) all use Joomla as their preferred CMS.
Joomla is written by committed volunteers. Many of those volunteers use it in their everyday web design, building and hosting. So, unlike many other systems, Joomla is built by those using it on a daily basis. That is reflected in its secure, robust nature.
Is there help for extension developers with Joomla 5?
Yes, a growing manual is aimed at those who code and maintain their extensions. The manual can be found at https://manual.joomla.org/migrations/44-50/ and is a growing work to help developers get ahead of any changes.
How can you help develop Joomla?
There are a variety of ways in which you can get actively involved with Joomla. It doesn't matter if you are a coder, an integrator, or a user of Joomla. You can join the community on Mattermost and look through the teams to join, or if you are ready, you can jump right into the Joomla! Bug Squad.
The Joomla! Bug Squad and the CMS Release Team are some of the most active teams in the CMS development process and are always looking for people (not just developers) who can help with sorting bug reports, coding patches and testing solutions. It is a great way to increase your working knowledge of the Joomla code base and also a great way to meet new people from all around the world.
You can also help Joomla development by thanking those involved in the many areas of the process. The Project also wants to thank all the contributors who have taken the time to prepare and submit work to be included in the Joomla CMS and Framework.
Where can I find documentation about Joomla 5?
There are some tutorials to help you with Joomla 4. You can find the existing ones, like creating a Plugin or a Module for Joomla 4, namespaces conventions, prepared statements, using the new web asset classes and many more in https://docs.joomla.org/Category:Joomla!_5.x
We encourage developers to help write the documentation about Joomla 5 on docs.joomla.org to help and guide users and other extension developers.
A JDocs page will help developers to see the existing documentation and the documentation still needed.
We invite you to check it regularly, update it and provide the missing content.
Related information
If you are an extension developer, please make sure you subscribe to the extension developer channel https://joomlacommunity.cloud.mattermost.com/main/channels/extension-development-room
Where you can join the community of extension developers.
A Huge Thank You to Our Volunteers!
Joomla 5.1.3 is the result of thousands of hours of work by dozens of volunteers.
A big thank you goes out to everyone who contributed to the 5.1.3 release!
Who all contributed code for 4.4.7 and 5.1.3
A huge shout out to our teams, who have done such an amazing job. In particular, the CMS maintenance team, CMS release team, docs team and Marketing team all did their utmost to make this release happen.
Thank you all.
Translations
Dutch: Joomla 5.1.3 en 4.4.7 - veiligheidsreleases zijn nu beschikbaar
French: Joomla ! 5.1.3 et Joomla ! 4.4.7 sont disponibles en tant que mises à jour de sécurité
German: Joomla! 5.1.3 und Joomla! 4.4.7 als Sicherheitsupdates veröffentlicht
Russian: Вышли релизы безопасности Joomla 5.1.3 и Joomla 4.4.7
Turkish: Joomla 5.1.3 ve 4.4.7 Güvenlik ve Hata Düzeltme Sürümü