joomla-1.5.15 has been released on the 3rd of November and fixes two security holes. I have tested it and so far everything is working. I may be wrong, but I feel like this package needs loving. I think I could proxy-maintaining it, if the web-apps herd is interested.
*** This bug has been marked as a duplicate of bug 293648 ***