07. Juli 2026
Das Joomla-Projekt ist erfreut, die Veröffentlichung von Joomla! 6.1.2 und Joomla! 5.4.7 bekannt zu geben. Hierbei handelt es sich um ein Sicherheits- und Bugfix-Release!
Diese Version setzt die hohen Standards von Joomla im barrierefreien Webdesign fort und hebt die Werte von Joomla – Integration, Einfachheit und Sicherheit – in einer noch leistungsfähigeren Open-Source-Webplattform hervor.
Automatische Updates
Wenn du die automatischen Updates für Joomla! Core aktiviert hast, werden die Updates von 5.4.6 auf 5.4.7 und von 6.1.1 auf 6.1.2 automatisch installiert. Mit den Standardeinstellungen bekommen alle Superuser eine E-Mail mit dem Ergebnis des Updates.
Wenn du die automatischen Updates für Joomla! Core deaktiviert hast, musst du das Joomla!-Update manuell starten.
Sicherheitskorrekturen
[20260701] - Core - Incorrect Access Control in com_media webservice endpoints
[20260702] - Core - Incorrect Access Control in com_contact vcf download
[20260703] - Core - XSS in MFA method management
[20260704] - Core - XSS in com_templates
[20260705] - Core - XSS in various modalreturn layouts
[20260706] - Core - XSS in com_installer
[20260707] - Core - XSS in the generic image output layout
[20260708] - Core - XSS through language overrides
[20260709] - Core - Incorrect Access Control in com_workflow
[20260710] - Core - Incorrect Access Control in com_modules
[20260711] - Core - Incorrect Access Control in com_privacy webservice endpoints
[20260712] - Core - Incorrect Access Control in com_fields webservice endpoints
Fehlerbehebungen und Verbesserungen in 6.1.2 und 5.4.7
#44914: [5.4] contact serializer and newsfeed serializer by @sinahaghparast
#47203: [5.4] allow extension update from cli by @alikon
#47483: [5.4] Fix aria-expanded check by @janschoenherr
#47548: [5.4] fix CodeMirror editor duplication by @adarshdubey03
#47603: [5.4] Load the mail template from the language of the mail template by @laoneo
#47637: [5.4] Compile the manifest path from extension root by @laoneo
#47734: [5.4] Do not go to database setup in installer when password has spaces at beginning/end by @laoneo
#47748: [5.4] [webservices] Create a user access level via POST by @alikon
#47751: [5.4] [webservices] PATCH user access level without rules by @alikon
#47752: [5.4] Fix Author Display Issue Using Article Setting by @CSGoat0
#47774: [5.4] Activate filters in frontend only with filter-button by @chmst
#47791: [6.1] Update docs about branches after 6.1.0 stable by @heelc29
#47792: [6.1] README delete heavy development note by @heelc29
#47800: [5.4] Preserve zero select option text by @janschoenherr
#47804: [6.1] [AI] Fix Accessiblemedia subform values for non-image media types by @tecpromotion
#47819: [5.4] POST com_contact form with webservices and custom reply enabled by @alikon
#47831: [6.1] Remove obsolete exclusion for tinymce/langs from typos.toml by @richard67
#47852: [5.4] Regression fix for security fix in 5.4.6 and 6.1.1 by @HLeithner
#47855: [5.4] Fix Modal Pagination Breaks Navigation by @CSGoat0
#47865: [5.4] Joomla Alert Success by @brianteeman
#47869: [5.4] add email sending test for contact form by @alikon
#47882: [5.4] Cache fido metadata in build directory and preserve on build by @HLeithner
#47896: [5.4] Reorder and update Text::script() calls for media field labels by @brianteeman
#47916: [5.4] [AI] Fix the Indexer Debugger constructor and show error passing no or invalid id by @MacJoom
#47917: [5.4] Reorder and update Text::script() calls for joomlaupdate by @brianteeman
#47920: [6.1] Disable flaky view transitions in system tests by @laoneo
#47931: [5.4] Fix doc block for input type by @laoneo
#47951: [5.4] Use item->locked instead of item->last_execution in "Running Since" tooltip on Scheduled Tasks page by @hiteshm0
#47964: [5.4] Always use a new installer instance on discover install by @laoneo
#47972: [5.4] Use the correct function to get the message from an exception by @laoneo
#47978: [5.4] Fix potential issue with update multiple extensions by @joomdonation
#47985: [5.4] Cookie authentication: load language file so log message is translated by @tecpromotion
#47986: [5.4] Cookie authentication: fix username placeholder in failed-login log message by @tecpromotion
#47993: [5.4] com_users unable to filter by unactivated users state by @alikon
#47996: [6.1] [AI] Make CSS url() versioning resilient to unparseable vendor CSS by @tecpromotion
#48038: [6.1] [AI] Fix extension/update upload failing after joomla/filesystem 4.2.0 by @tecpromotion
Die vollständige Liste auf GitHub findest du hier für 6.1.2: https://github.com/joomla/joomla-cms/milestone/164?closed=1
