Joomla 6.1.3 & 5.4.8の新しいリリース
リリース日：2026年8月19日 日本時間
リリース内容： セキュリティ＆バグ修正
Security fixes
- [20260801] - Core - Response header injection in download views
- [20260802] - Core - Improper CORS origin validation
- [20260803] - Core - Inconsistent ACL checks for mutating webservice endpoints
- [20260804] - Core - Improper ACL checks for custom fields webservice endpoints
- [20260805] - Core - Improper ACL checks for category webservice endpoints
- [20260806] - Core - XSS through schema.org outputs
- [20260807] - Core - MFA Authentication Bypass
- [20260808] - Core - Improper ACL checks for batch copy actions
- [20260809] - Core - Improper ACL checks when injection schema.org contact data
- [20260810] - Core - Unrestricted uploads of SHTML files
Bug fixes and improvements
The following bug fixes are included in Joomla! 6.1.3 and Joomla! 5.4.8 (all 5.4 bug fixes are also up-merged into 6.1):
- #46805: [5.4] check ACL when display link to user edit form by @heelc29
- #47202: [5.4] Editing menu item redirects to list view with original filters by @hiteshm0
- #47626: [5.4] Implement date and time validation on input change (and more) by @cyrez
- #47766: [5.4] Better error messages on updateserver errors by @TLWebdesign
- #47780: [5.4] Fix: Change data-nested='true' for nested components (Categories, Menu Items, Modules) by @RiteshGite
- #47886: [5.4] [AI] Fix Global Check-in treating checked_out=0 rows as needing check-in by @genr8r
- #48060: [5.4] Fix article options ignored on article view by @joomdonation
- #48074: [5.4] Prevent DivisionByZeroError in ListModel when list.limit is 0 by @Denitz
- #48080: [5.4] Update joomla/filesystem from 3.2.0 to 3.3.0 and partly backport PR 48038 from 6.1-dev by @richard67
- #48081: [6.1] Remove tinymce Bosnian language files from deleted files list in script.php by @richard6
- #48088: [5.4] fix duplicate no results message in installed languages by @adarshdubey03
- #48091: [5.4][plg_actionlog] log user block/unblock only 1 by @alikon
- #48116: [5.4] Clean up filepatcher remainders from 5.4.7 hotfix on core update by @richard67
- #48163: [5.4] fix division by zero in subforms by @chmst
- #48171: [5.4] Add path traversal checks in com_templates by @SniperSister
- #48173: [5.4] Smart Search: Standardize memory_table_limit by @Hackwar
- #48184: [5.4] awesomplete example typo by @brianteeman
- #48185: [5.4] Backport Fix treeselect indentation- #48125 by @brianteeman
- #48212: [5.4] Fix days_of_week normalization (shorter version) by @tecpromotion
- #48216: [5.4] site offline by @brianteeman
The full list of Pull Requests for Joomla! 6.1.3 on GitHub is available here:
https://github.com/joomla/joomla-cms/milestone/166?closed=1
The full list of Pull Requests for Joomla! 5.4.8 on GitHub is available here: https://github.com/joomla/joomla-cms/milestone/165?closed=1
ダウンロード先：
既存Joomlaユーザーの方
サイト管理画面にログインしてJoomlaシステムの更新アイコンをクリックしてシステムの更新をして下さい。
システムの更新をする前に、必ず、現在のシステムのバックアップ（DBを含む）をして下さい。
新規ユーザーの方
Joomlaじゃぱん(http://www.joomla.jp)で日本語版パッケージがダウンロードできるようになりましたら、そちらから最新システムをダウンロードして下さい。
お問合せフォーム