[#48233] - [5.4] Backport of security flag for updates
- Fixed in Code Base
- 24 Aug 2026
- Medium
- Build: 5.4-dev
- # 48233
- Diff
- Digital-Peak:5security
User tests: Successful: Unsuccessful:
- I read the Generative AI policy and my contribution is either not created with the help of AI or is compatible with the policy and GNU/GPL 2 or later.
Summary of Changes
This is a backport of #48127 and #48190. Please see full documentation in these pr's.
Testing Instructions
- Install the module mod_demo.zip
- Open the page /administrator/index.php?option=com_installer&view=update
- Click on "Check for updates"
Actual result BEFORE applying this Pull Request
Update is shown without security flag.
Expected result AFTER applying this Pull Request
Update is shown with security High.
Link to documentations
Please select:
-
Documentation link for guide.joomla.org:
-
No documentation changes for guide.joomla.org needed
-
Pull Request link for manual.joomla.org: joomla/Manual#688
-
No documentation changes for manual.joomla.org needed
| Status | New | ⇒ | Pending |
joomla-cms-bot
- | Category | ⇒ | SQL Administration com_admin Postgresql com_installer Language & Strings JavaScript Repository NPM Change Installation Libraries Front End Plugins |
The backport is a good idea, but we won’t be merging it into 5.4.8 or 6.1.3.
It may be included in 5.4.9.
I have tested this item ✅ successfully on 72fb4b8
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/48233.
I have tested this item ✅ successfully on 72fb4b8
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/48233.
| Labels |
Added:
Language Change
NPM Resource Changed
PR-5.4-dev
|
||
@laoneo As the commits which have invalidated @bembelimen 's test result were just a reordering of language strings and a clean branch update, his test is still valid. Please restore the test result in the issue tracker using the "Alter test" button. Thanks in advance.
Done
I have tested this item ✅ successfully on b328d18
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/48233.
I have tested this item ✅ successfully on b328d18
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/48233.
| Status | Pending | ⇒ | Ready to Commit |
RTC
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/48233.
RTC
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/48233.
| Labels |
Added:
RTC
|
||
I have tested this item ✅ successfully on c8d2f23
Final test before merging: The PR does what it claims to do.
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/48233.
I have tested this item ✅ successfully on c8d2f23
Final test before merging: The PR does what it claims to do.
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/48233.
| Status | Ready to Commit | ⇒ | Fixed in Code Base |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2026-08-24 06:12:09 |
| Closed_By | ⇒ | richard67 |
Thanks @laoneo for this PR, and @alikon snd @bembelimen for testing.
The backport is a good idea, but we won’t be merging it into 5.4.8 or 6.1.3.
It may be included in 5.4.9.