Joomla.org announced on October 17th the release of version 1.5.24, a security update. All Joomla! site owners should plan to upgrade their sites. The release is a medium security release. Details below. Please visit Joomla.org and
[20111003] - Core - Information Disclosure
Project: Joomla!
SubProject: All
Severity: Moderate
Versions: 1.5.23 and earlier
Exploit type: Information Disclosure
Reported Date: 2011-September-09
Fixed Date: 2011-October-17
Description — Weak encryption causes potential information disclosure.
Affected Installs — Joomla! version 1.5.23 and earlier
Solution — Upgrade to the latest Joomla! version (1.5.24 or later)
Reported by Jeff Channell
Contact — The JSST at the Joomla! Security Center
