The Joomla Project is pleased to announce the immediate availability of Joomla 2.5.4. This is a security release. The Production Leadership Team's goal is to continue to provide regular, frequent updates to the Joomla community. Learn more about Joomla! development at the Developer Site.

The update process is very simple, and complete instructions are available here. Note that there are now easier and better ways of updating than FTPing the files.


New Installations: Click here to download Joomla 2.5.4 (Full package) »

Update Package: Click here to download Joomla 2.5.4 (Update package) »

Note: Please read the update instructions before updating.


Want to test drive Joomla? Try the online demo or the Joomla JumpBox. Documentation is available for beginners.

Please note that you should always backup your site before upgrading.

Release Notes

Check the Joomla 2.5.4 Post-Release FAQs to see if there are important items and helpful hints discovered after the release.

Statistics for the 2.5.4 release period

  • Joomla 2.5.4 contains:
    • 3 new features added
    • 157 tracker issues fixed

Joomla 2.5.4 uses version 11.4 of the Joomlal Platform.

New Features Added

The following new features have been added, with links to the Feature tracker issue.

Security Issues Fixed

Tracker Issues Fixed

27941Add warning/no warning icons on Database screenAdministration
27842Batch processing brokenAdministration
28175Calendar readonly="true" status prevents loading custom calendars.Administration
27923com_menus item model calls non-existing methodAdministration
28190com_search: Show Search Results results in PHP fatal errorAdministration
27052Content menu displayed when disable component contentAdministration
28252Don't show the site secret and optimize ConfigModelApplicationAdministration
28180fix for com_modules getListQuery returning too many rows [patch attached]Administration
28158Fix for override manager regarding pluginsAdministration
27868Joomla 1.7.x batch processing allow move items to trashed categoriesAdministration
28007Languages overrides not showing content when showing is set to allAdministration
27893New version module interferes with license notice in HathorAdministration
28269Protected extensions can be disabled through the toolbarAdministration
27844Version Module for Admin to show Joomla version in Footer admin TemplateAdministration
28237PHP Notice in back end login when cache enabled.Authentication and Login
27600Editor-XTD buttons Issues in FireFox 9Browsers
28314#28299 can cause performance issue if root category is loaded in non multilanguage modeCMS Libraries
24338Autoupdate fails for components after applying a patch from issue #24305CMS Libraries
28226Incorrect SQL statement for MenuItems in menuitem libraryCMS Libraries
28093JVersion::getHelpVersion() unnecessarily checks the versionCMS Libraries
28091Move the check if multilang is enabled to the librariesCMS Libraries
28299SEF issue when using article button in multilanguageCMS Libraries
27829$app variable can possibly not be set, causing a PHP errorCode Quality
25423$message not initialized in ~/components/com_users/controllers/reset.phpCode Quality
28023Backport JSession::checkToken() from the platformCode Quality
28262Bug with Rebuild button in the Menu ManagerCode Quality
28125Database change broke JUser getGroups() APICode Quality
27410Don't use DS anymoreCode Quality
28286Fix @since tags for 2.5.4. Code style in CMS libraries.Code Quality
28265Fix use of deprecated API in com_installerCode Quality
27870Joomla 2.5 com_content generates non-valid xhtmlCode Quality
28186PHP Strict Standards: Non-static method UsersHelperRoute::getResetRoute() should not be called statically, assuming $this from incompatible contextCode Quality
28088Strict error with JSite::getMenu()Code Quality
27818Update 1.7 strings to 2.5Code Quality
27886An unpublished linked contact leads to articles not being displayed.Components
27581Basic Search contact search is brokenComponents
26986Batch processing of articles doesn't work for users with restricted rightsComponents
27700com_redirect redirects should use 301 redirect, not 303Components
28174com_wrapper doesn't support iframe without borderComponents
27780Dublicate Template StylesComponents
27872Error in Banner Track ClicksComponents
27853error notice using search in joomla 2.5Components
27956Missing security check of file default_links.phpComponents
28187Notice in com_contact when sendEmail failsComponents
23021Notice message in banners modelComponents
28280Regression in the com_installer warningsComponents
28206Result Description "if condition" was missing in com_finderComponents
28154RSS feed of com_finder throws fatal errorComponents
27716Saving 'Start Publishing' updates 'Finish Publishing' not 'Start Publishing'Components
28277Wrong 'category' tag in category feedComponents
28172Backslashes are added every time you save Wrapper menu itemDatabase
27774Joomla on Windows Azure - Load time is slowDatabase
28001path delimiter doesn't work properly on SQL Server and SQL AzureDatabase
28318Remove duplicate SQL Server directories.Database
28266Sql error generated in menusDatabase
28222SQL error generated in system redirect pluginDatabase
28008sql syntax error in libraries/joomla/database/table/session.php:137Database
27961Template is not displayed in the Styles (backend)Database
27960Unable to create an articleDatabase
27888users notes categoriesDatabase
26602Front end article creation in unpublished categoryForms
28150ContentBuildRoute does not remove layout if link attached to menu itemFront End
27890mod_menu invalid rendering of items of type alias and urlFront End
27824Offline image overflowFront End
27931Profile fields not available in edit, only registrationFront End
28134Typo in com_content viewFront End
28145Add uninstall support for possibly installed media filesInstallation
28323com_joomlaupdate does not delete joomla.xml file in root folderInstallation
28325Deleted files not being deleted during version updateInstallation
28259Error in Database tab in Extension ManagerInstallation
28261Error message contains the string Joomla 1.7Installation
27919Extension Manager: Database does not fix text filter problemInstallation
27887Extension Manager: Database does not fix update problemInstallation
28122Fix installation for Joomla 3.0Installation
27751Installation - Check to ensure the schema file existsInstallation
28188Javascript issue on IE7 during installInstallation
27916Path of home sub-menu items contain "News Feeds"Installation
27568Remove the use of all deprecated functions (except JRequest and JException) in the installation.Installation
28132Typo in joomla-cms / installation / models / configuration.phpInstallation
26468Unable to install multiple updates at onceInstallation
27920Update SQL query requires temp table permissionsInstallation
27895Version Number Module Not Assigned to MenusInstallation
28329Joomla Update component requires Purge Cache to change Update ServerInstallation
27863JHtmlGrid::sort brokenJavascript
27843media.php jInsertFieldValueJavascript
27880Please first make a selection from the lis't: Huge error on 40+ sitesJavascript
28268Update MooTools to 1.4.5Javascript
28046Update MooTools to version 1.4.4Javascript
27905Upgrade MooTools to version 1.4.3Javascript
27889Change permissions in language manager changes default language to englishLanguages
28090Changes to the Administrator Language StringsLanguages
28072Content Languages ordering brokenLanguages
28098Entering link to article via Article button -making it Multilanguage awareLanguages
28036Implementing Access levels for Content LanguagesLanguages
28157Inconsistent Language Constants in the Beez_20 Language FilesLanguages
27929Installing sample data and defining as site lang another lang then English breaks linksLanguages
28151Joomla! 2.5 - Multilanguage feature - external links end with 404Languages
28115PHP 5.3.8 Notice for some language packs with iconvLanguages
27975smart search author not translated.Languages
27966Wrong constants in article menu itemLanguages
27959Wrong redirection when login on multilang site with SEF on.Languages
27779Articles; H1 tag appearing before the article title...Layouts
27864User profile page does not HTML escape the user's nameLayouts
23414Flash uploader rtl - browse button disabledMedia Manager
28199Archive module error when no articles are archivedModules
28099Editor buttons in Custom HTML moduleModules
28000Featured articles parameter does not work in mod_articles_popularModules
28316Incorrect ordering value if editing last moduleModules
28017JModuleHelper All but selected does not work correctly when there is no itemidModules
27659joomla 2.5beta1 module alternative layout on admin side don't workModules
27536mod_articles_category orderingModules
27902mod_languages html 5 validation error empty action attributeModules
28021mod_login module does not HTML escape the user's nameModules
27896mod_search head search link title not escapedModules
28068Module weblinks does not import needed JModel classModules
28086No access to params "images" in mod_articles_newsModules
28181Notice in weblinks moduleModules
27150PHP Fatal error when detele a article category assigned to a artcle categories module**Modules
27873The related articles modules (mod_related_items) are not showingModules
27972Multilanguage Status module report version 1.7.1 should be 2.5.xNone
27802The package installer insert two database entries on templatesNone
27784Use less deprecated functionsNone
28120XHTML 1.0 TransitionalNone
28303Change 28026 so it doesn't modify platform filesPlatform
28264Fix JSession::checkToken() to be forward compatible with Joomla 3.0Platform
27706JAccess::getGroupsByUser doesn't work as expected in case of guest userPlatform
28133JMail addAttachment ignores parameters (filename, encoding, type)Platform
27951Missing parameter handling in magic proxy methods for name quotesPlatform
26346Sync some changes from the platforumPlatform
26906Zip Archive native unpack wrong resultPlatform
27662Can't update #__update_sites table at extension install on SQL ServerPlugins
27990Captcha Typo (with solution)Plugins
27862Code error plgUserProfile line 188Plugins
27918Date format in /plugins/usr/profile/profile.php is wrongPlugins
28179JText values in js of quick icons force to escape single quotesPlugins
27477languagefilter: build rule is deleting "option" paramPlugins
27770loadposition strips the $ character from html modulesPlugins
28118Notice 'Only variable references should be returned by reference'Plugins
28044Plugin Loadmodule ignores selected stylePlugins
28075Recapthca image doesnt show up, maybe because of https secure websitePlugins
27898System cache throws warning on Ajax requests with JSON responsePlugins
28284System messages included in cached pagesPlugins
28255Update TinyMCE to version 3.4.9 + optimizationsPlugins
28028Entering an article link via the Article button=>links broken in SEFSearch Engine Friendly
27759Alternative Sample Data Files (blog and brochure)SQL Files
28121Empty trash not trashing some sample data articlesSQL Files
27885TinyMCE settings in SQL don't reflect recent changes in options.SQL Files
27992Beez 2.0 has one css file still hardcoded with template nameTemplates
28198Beez 5 generating warings/noticesTemplates
28117Hathor forgotten in #28072Templates
28140JText values in js beez templates force to escape single quotesTemplates
27938labels missing for Smart Search / Finder moduleTemplates
28114missing css .icon-32-print class in bluestork templateTemplates
27907Sitename not escapedTemplates
2826327052 does not work as should for System Links menu itemsUser Interface
28162Creating menu items saves selection when it shouldn'tUser Interface


Joomla! Bug Squad

Thanks to the Joomla Bug Squad for their dedicated efforts investigating reports, fixing problems, and applying patches to Joomla. If you find a bug in Joomla, please report it on the Joomla! CMS Issue Tracker.

Active members of the Joomla Bug Squad during this last release cycle include: A Firoozmandan, Akarawuth Tamrareang, Alain Rivest, Andrea Tarr, Andrew Eddie, Ashwin Date, Bill Richardson, Brian Teeman, Chris Davenport, Christophe Demko, Denise McLaurin, Dennis Hermacki, Elin Waring, Emerson Rocha Luiz, Francisco Marzoa, Ian MacLennan, Jacob Waisner, Jacques Rentzke, James Brice, Janich Rasmussen, Jean-Marie Simonet, Jennifer Marriott, Jeremy Wilken, Kevin Griffiths, Loyd Headrick, Mark Dexter, Matt Thomas, Michael Babker, Mutuga Kigumi, Neil McNulty, Nikolai Plath, Ofer Cohen, Prasit Gebsaap, Rachmat Wakjaer, Rob Clayburn, Roland Dalmulder, Rouven Weßling, Rune Sjøen, Samuel Moffatt, Shaun Maunder, Sudhi Seshachala, Tim Plummer, Tom Fuller, Troy Hall, Viet Hoang Vu, Holger Brandt, Leo Lammerink, Herve Boinnard.

Bug Squad Leadership: Mark Dexter Coordinator; Elin Waring and Marijke Stuivenberg, Team Leaders.

Joomla! Security Strike Team

A big thanks to the Joomla! Security Strike Team for their ongoing work to keep Joomla secure. Members include: Airton Torres, Alan Langford, Bill Richardson, Elin Waring, Jason Kendall, Marijke Stuivenberg, Mark Dexter, Omar Ramos, Rouven Weßling, Samuel Moffatt.