JOOMLA UPDATE

Joomla 3.9.25 พร้อมใช้งานแล้ว นี่เป็นรุ่นการรักษาความปลอดภัยสำหรับ Joomla ซีรีส์ 3.x ซึ่งระบุช่องโหว่ด้านความปลอดภัย 9 ช่องและมีการแก้ไขข้อบกพร่องและการปรับปรุงมากกว่า 40 รายการ

What's in 3.9.25?

Joomla 3.9.25 includes 9 security vulnerability fixes and addresses several bugs, including:

Security Issues Fixed

• [20210301https://developer.joomla.org/security-centre/841-20210301-core-insecure-randomness-within-2fa-secret-generation.html" style="color: rgb(0, 136, 204); text-decoration: none;">More information »
• [20210302https://developer.joomla.org/security-centre/842-20210302-core-potential-insecure-fofencryptrandval.html" style="color: rgb(0, 136, 204); text-decoration: none;">More information »
• [20210303https://developer.joomla.org/security-centre/843-20210303-core-xss-within-alert-messages-showed-to-users.html" style="color: rgb(0, 136, 204); text-decoration: none;">More information »
• [20210304https://developer.joomla.org/security-centre/844-20210304-core-xss-within-the-feed-parser-library.html" style="color: rgb(0, 136, 204); text-decoration: none;">More information »
• [20210305https://developer.joomla.org/security-centre/845-20210305-core-input-validation-within-the-template-manager.html" style="color: rgb(0, 136, 204); text-decoration: none;">More information »
• [20210306https://developer.joomla.org/security-centre/846-20210306-core-com-media-allowed-paths-that-are-not-intended-for-image-uploads.html" style="color: rgb(0, 136, 204); text-decoration: none;">More information »
• [20210307https://developer.joomla.org/security-centre/847-20210307-core-acl-violation-within-com-content-frontend-editing.html" style="color: rgb(0, 136, 204); text-decoration: none;">More information »
• [20210308https://developer.joomla.org/security-centre/848-20210308-core-path-traversal-within-joomla-archive-zip-class.html" style="color: rgb(0, 136, 204); text-decoration: none;">More information »
• [20210309https://developer.joomla.org/security-centre/849-20210309-core-inadequate-filtering-of-form-contents-could-allow-to-overwrite-the-author-field.html" style="color: rgb(0, 136, 204); text-decoration: none;">More information »

Bug fixes and Improvements

• Fix Save as Copy tag #32454
• Fix published attribute for Tag field #32332
• Fix batch menu items #32380
• Stream transport should enable verify_peer_name when possible #16501
• Optimize the code for rename incorrectly cased files on update #32176
• Addional PHP 8 improvments #31977 #32374

Visit GitHub for the full list of bug fixes.

Download

A Huge Thank You to Our Volunteers!

A big thank you goes out to everyone that contributed to the 3.9 releases!

Make the next Joomla release even better

Download the upcoming releases from the nightly build page (for testing purposes only - do not use on production sites).
Want an even easier option? Get yourself over to launch.joomla.org - where you can also test Joomla 4.0 with just one click - no testing environment needed, nothing to install or set up (at all).