Joomla x.xの新しいリリース

リリース日：2026年７月８日　日本時間

リリース内容：セキュリティアップデートとバグ修正

Security fixes

• [20260701] - Core - Incorrect Access Control in com_media webservice endpoints
• [20260702] - Core - Incorrect Access Control in com_contact vcf download
• [20260703] - Core - XSS in MFA method management
• [20260704] - Core - XSS in com_templates
• [20260705] - Core - XSS in various modalreturn layouts
• [20260706] - Core - XSS in com_installer
• [20260707] - Core - XSS in the generic image output layout
• [20260708] - Core - XSS through language overrides
• [20260709] - Core - Incorrect Access Control in com_workflow
• [20260710] - Core - Incorrect Access Control in com_modules
• [20260711] - Core - Incorrect Access Control in com_privacy webservice endpoints
• [20260712] - Core - Incorrect Access Control in com_fields webservice endpoints

Bug fixes and improvements

The following bug fixes are included in Joomla! 6.1.2 and Joomla! 5.4.7 (all 5.4 bug fixes are also up-merged into 6.1):

• #44914: [5.4] contact serializer and newsfeed serializer by @sinahaghparast
• #47203: [5.4] allow extension update from cli by @alikon
• #47483: [5.4] Fix aria-expanded check by @janschoenherr
• #47548: [5.4] fix CodeMirror editor duplication by @adarshdubey03
• #47603: [5.4] Load the mail template from the language of the mail template by @laoneo
• #47637: [5.4] Compile the manifest path from extension root by @laoneo
• #47734: [5.4] Do not go to database setup in installer when password has spaces at beginning/end by @laoneo
• #47748: [5.4] [webservices] Create a user access level via POST by @alikon
• #47751: [5.4] [webservices] PATCH user access level without rules by @alikon
• #47752: [5.4] Fix Author Display Issue Using Article Setting by @CSGoat0
• #47774: [5.4] Activate filters in frontend only with filter-button by @chmst
• #47791: [6.1] Update docs about branches after 6.1.0 stable by @heelc29
• #47792: [6.1] README delete heavy development note by @heelc29
• #47800: [5.4] Preserve zero select option text by @janschoenherr
• #47804: [6.1] [AI] Fix Accessiblemedia subform values for non-image media types by @tecpromotion
• #47819: [5.4] POST com_contact form with webservices and custom reply enabled by @alikon
• #47831: [6.1] Remove obsolete exclusion for tinymce/langs from typos.toml by @richard67
• #47852: [5.4] Regression fix for security fix in 5.4.6 and 6.1.1 by @HLeithner
• #47855: [5.4] Fix Modal Pagination Breaks Navigation by @CSGoat0
• #47865: [5.4] Joomla Alert Success by @brianteeman
• #47869: [5.4] add email sending test for contact form by @alikon
• #47882: [5.4] Cache fido metadata in build directory and preserve on build by @HLeithner
• #47896: [5.4] Reorder and update Text::script() calls for media field labels by @brianteeman
• #47916: [5.4] [AI] Fix the Indexer Debugger constructor and show error passing no or invalid id by @MacJoom
• #47917: [5.4] Reorder and update Text::script() calls for joomlaupdate by @brianteeman
• #47920: [6.1] Disable flaky view transitions in system tests by @laoneo
• #47931: [5.4] Fix doc block for input type by @laoneo
• #47951: [5.4] Use item->locked instead of item->last_execution in "Running Since" tooltip on Scheduled Tasks page by @hiteshm0
• #47964: [5.4] Always use a new installer instance on discover install by @laoneo
• #47972: [5.4] Use the correct function to get the message from an exception by @laoneo
• #47978: [5.4] Fix potential issue with update multiple extensions by @joomdonation
• #47985: [5.4] Cookie authentication: load language file so log message is translated by @tecpromotion
• #47986: [5.4] Cookie authentication: fix username placeholder in failed-login log message by @tecpromotion
• #47993: [5.4] com_users unable to filter by unactivated users state by @alikon
• #47996: [6.1] [AI] Make CSS url() versioning resilient to unparseable vendor CSS by @tecpromotion
• #48038: [6.1] [AI] Fix extension/update upload failing after joomla/filesystem 4.2.0 by @tecpromotion

The full list of Pull Requests for Joomla! 6.1.2 on GitHub is available here: https://github.com/joomla/joomla-cms/milestone/164?closed=1

The full list of Pull Requests for Joomla! 5.4.7 on GitHub is available here: https://github.com/joomla/joomla-cms/milestone/161?closed=1

 

ダウンロード先：

既存Joomlaユーザーの方 

サイト管理画面にログインしてJoomlaシステムの更新アイコンをクリックしてシステムの更新をして下さい。

システムの更新をする前に、必ず、現在のシステムのバックアップ（DBを含む）をして下さい。 

新規ユーザーの方

Joomlaじゃぱん(http://www.joomla.jp)で日本語版パッケージがダウンロードできるようになりましたら、そちらから最新システムをダウンロードして下さい。

英語版のダンロード先は、こちらです。

 

 

お問合せフォーム