Joomla 3.9.0 (joomla 3.9) Open Source Content Management System (open source cms) beta has been released, (October 29, 2017) A very interesting change has occurred in this version, and that is the pre-update checker. The function of this extension is to control and check the compatibility of installed extensions with the Joomla version. With these interpretations, web designers no longer have to worry about which extension is compatible with the new Joomla version or not.
The details of the changes and the release date of the stable version of Joomla 3.9 have not yet been determined.
Website and online store design, professional Linux hosting, Joomla SEO
joomla 3.9.0
Joomla 3.9.0 stable version was released on October 30, 2018, with the title of the privacy tool suite.
This version has over 250 improvements, some of which include:
Performing light work required to maintain privacy.
Joomla 3.9.1 open source content management system is now available, this is a bug fix for Joomla 3X series which was released on November 27, 2018 and includes more than 40 bug fixes and improvements for various areas.
Fixed issues :
Fix for auto title option from recent actions management module.
After login, you will be redirected to privacy request form by Com_Privacy
Joomla 3.9.2 is an open source content management system (open source cms) available since January 15, 2019. This bug fix is related to the Joomla 3X series and includes the resolution of 4 security holes and more than 50 bug fixes.
Security issues fixed :
Low Priority - Core - XSS cached in mod_banners (affects Joomla 2.5.0 to 3.9.1).
Low Priority - Core - XSS cached in com_contact (affects Joomla 2.5.0 to 3.9.1).
Low Priority - Core - XSS cached in global configuration text filter settings (affects Joomla 2.5.0 to 3.9.1).
Low Priority - Core - XSS cached in global configuration guide URL (affects Joomla 2.5.0 to 3.9.1).
Fixed bugs :
Fixed issues in com_finder, com_banners, com_messages, com_users notes.
Removed Caching field in languages, syndication, random image and Editors API login modules.
Joomla 3.9.3 is an open source content management system (open source CMS) released on February 12, 2019, which includes the resolution of 6 security holes and more than 30 bug fixes.
Security issues that were fixed :
Low Priority - Core - No URL filtering in various core components (affects Joomla 2.5.0 to 3.9.2).
Low Priority - Core - Issue in browser-side mime causing XSS attack vectors (affects Joomla 1.0.0 to 3.9.2).
Low Priority - Core - Additional warning in global configuration text filter settings (affects Joomla 2.5.0 to 3.9.2).
Low Priority - Core - XSS issue stored in global configuration guide URL #2 (affects Joomla 2.5.0 to 3.9.2).
Low Priority - Core - XSS issue in core.js writeDynaList (affects Joomla 2.5.0 to 3.9.2).
Joomla 3.9.4 open source content management system is now available, this bug fix is related to Joomla 3X series and includes fixing 4 security holes and 28 bug fixes, which was released on March 12, 2019.
Main issues fixed in this version :
Fixing XSS vulnerabilities (affecting Joomla 3 to Joomla 3.9.3).
Checking for missing ACLs in sample data plugins (affecting Joomla 3.8 to Joomla 3.9.3).
Joomla 3.9.5 is now available, this bug fix for Joomla 3X series and includes fixing 3 security holes and more than 20 bug fixes, which was released on April 9, 2019.
Security issues fixed in this version :
Low Priority - Core - Fix security issues related to routing issue in com_media (Affects Joomla 1.5.0 to Joomla 3.9.4).
High Priority - Core - Refresh sitemap on endpoint so it is readable for invalid users (Affects Joomla 3.2.0 to Joomla 3.9.4).
Joomla 3.9.6 is an open source content management system (open source cms) available since May 7, 2019. This release is for the Joomla 3X series and includes 1 security hole and more than 25 bug fixes.
Security issue fixed in this version :
Low Priority - Core - Fix XSS attacks in com_user ACL (Affected Joomla 1.7.0 to Joomla 3.9.5)
Bugs fixed in this version :
Media Management
Added Edge Chromium support
Fixed date format in user notes
Advanced editing for publisher users
Automatically create cache folder, if it doesn't exist
Joomla 3.9.7 is an open source content management system (open source cms) available since June 11, 2019. This bug fix is related to the Joomla 3X series and includes fixing 3 security holes and more than 40 bug fixes.
Security issues fixed in this version :
Low Priority - Core - Fix CSV injection in com_actionlogs (Affects Joomla 3.9.0 to Joomla 3.9.6).
Low Priority - Core - Fix XSS attacks in subform field (Affects Joomla 3.6.0 to Joomla 3.9.6).
Low Priority - Core - Harden ACL in com_joomlaupdate (Affects Joomla 3.8.13 to Joomla 3.9.6).
Joomla 3.9.8 is an open source content management system (open source cms) available since June 11, 2019. This bug fix was released for Joomla 3.9.7, which was released due to the removal of the unofficial French server that was used for guidance.
Joomla 3.9.9 open source content management system is now available, this bug fix for Joomla 3X series and includes fixing 1 security hole and more than 30 bug fixes, which was released on July 9, 2019.
Security issues fixed in this version :
Low-priority - core - filter attributes in subforms allowed remote code execution. (Affected from Joomla 3.9.7 to Joomla 3.9.8)
Bugs fixed in this version :
Improved custom fields.
Improved media management.
Optimized voting system, cache cleared after voting.
Joomla 3.9.10 is an open source content management system (open source cms) available since July 10, 2019. It is a bug fix release for Joomla 3X series that addresses one of the bugs introduced in Joomla 3.9.9 and affects the template styles of multilingual websites.
Joomla 3.9.11 is an open source content management system (open source cms) available since August 13, 2019. This bug fix is related to Joomla 3X series and includes fixing 1 security hole and more than 25 bug fixes.
Security issues fixed in this version :
Low priority - core - related to contact form (affects Joomla 1.6.2 to Joomla 3.9.10)
Bugs fixed in this version :
Optimized language strings and unknown columns in custom fields.
Joomla 3.9.12 is an open source content management system (open source cms) available since September 24, 2019. This release is related to the Joomla 3X series and includes the resolution of 1 security hole and more than 30 bug fixes and improvements.
Security issues fixed in this version :
Low Priority - Core - XSS - in the logo parameter of default templates (Affects Joomla 3.0.0 to Joomla 3.9.11).
Bugs fixed in this version :
Fix minyear and maxyear bug in calendar.
Improved Google fonts in protostar template.
Optimized user session in mssql server.
Protected SQL server by adding pause mechanism to cli finder indexer.
Optimized image list for default image of custom fields.
Joomla 3.9.13 is an open source content management system (open source cms) available since November 5, 2019. This bug fix is related to Joomla 3X series and includes fixing 2 security holes and more than 15 bug fixes.
Security issues fixed in this version :
Low Priority - Core - Problem in com_template (Affects Joomla 3.2.0 to Joomla 3.9.12).
Low Priority - Core - Path disclosure in phpuft8 mapping files (Affects Joomla 3.6.0 to Joomla 3.9.12).
Joomla 3.9.14 is an open source content management system (open source cms) available since December 17, 2019. It is a bug fix release for Joomla 3X series that includes fixing 2 security holes and more than 35 bug fixes.
Security issues fixed in this version :
Low Priority - Core - Path disclosure in framework files (Affected Joomla 3.8.0 to Joomla 3.9.13).
Low Priority - Core - Various SQL injections via configuration parameters (Affected Joomla 2.5.0 to Joomla 3.9.13).
Bugs fixed in this version :
More compatibility with PHP7.4
Fixed incorrect ID generated for input fields in repeated subforms
Joomla 3.9.15 is an open source content management system (open source cms) available since January 28, 2020. This is a bug fix for the Joomla 3X series and includes the resolution of 3 low-level security vulnerabilities and more than 20 bug fixes and improvements.
Security issues fixed in this version :
Low-priority - Core - CSRF - in batch actions (Affects Joomla 3.0.0 to Joomla 3.9.14).
Low-priority - Core - CSRF com_templates LESS compiler (Affects Joomla 3.0.0 to Joomla 3.9.14).
Low-priority - Core - XSS in com_actionlogs (Affects Joomla 3.0.0 to Joomla 3.9.14).
Bugs fixed in this version :
Fixing bugs and optimizing beez theme.
Improving login emails: using absolute URLs.
Fixing tinyMCE editor bugs.
Preventing library plugins from writing to core files.
Joomla 3.9.16 is an open source content management system (open source cms) available since March 10, 2020. This bug fix is related to the Joomla 3X series and includes the resolution of 6 low-level security holes and more than 20 bug fixes and improvements.
Security issues fixed :
Low priority - Core - SQL injection in article menu parameters (Affects Joomla 1.7.0 to Joomla 3.9.15)
Low priority - Core - CSRF image performance in com_templates (Affects Joomla 3.2.0 to Joomla 3.9.15)
Low priority - Core - XSS in Protostar and Beez3 (Affects Joomla 3.0.0 to Joomla 3.9.15)
Low priority - Core - Incorrect access control in com_templates (Affects Joomla 2.5.0 to Joomla 3.9.15)
Low priority - Core - ID handling in com_users (Affects Joomla 3.2.0 to Joomla 3.9.15)
Low priority - Core - Incorrect access control in com_fields SQL field (Affects Joomla 3.7.0 to Joomla 3.9.15)
Bugs fixed :
Fix Link Relationship Properties Issues
Fields - Image List - Improved Folder Structure Display
Joomla 3.9.17 is an open source content management system (open source cms) available since April 21, 2020. This bug fix is related to the Joomla 3X series and includes fixing 3 security holes and more than 40 bug fixes.
Security issues fixed :
Low Priority - Core - Incorrect access control in edit access level function (Affects Joomla 3.8.8 to Joomla 3.9.16)
Low Priority - Core - Checks available for main user group in user group table (Affects Joomla 2.5.0 to Joomla 3.9.16)
Low Priority - Core - Incorrect access control in delete access level function com_users (Affects Joomla 2.5.0 to Joomla 3.9.16)
Joomla 3.9.18 is an open source content management system (open source cms) available since April 21, 2020. This is a bug fix release for Joomla 3X series which includes fixing one (1) bug.
Bugs fixed :
There was an error in the single tag that resulted in a 404 page being generated, which has been fixed.
Joomla 3.9.19 is an open source content management system (open source cms) available since June 2, 2020. This bug fix is related to the Joomla 3X series and includes the resolution of 5 low-level security holes and more than 40 bug fixes and improvements.
Security issues fixed :
Low-Priority-Core-XSS in Modules Tag Selector (Affects Joomla 3.0.0 to Joomla 3.9.18)
Low-Priority-Core-Inconsistent Text Default Settings (Affects Joomla 2.5.0 to Joomla 3.9.18)
Low-Priority-Core-XSS in com_modules Tag Options (Affects Joomla 3.0.0 to Joomla 3.9.18)
Medium-Priority-Core-XSS in jQuery.htmlPrefilter (Affects Joomla 3.0.0 to Joomla 3.9.18)
Low-Priority-Core-CSRF in com_postinstall (Affects Joomla 3.7.0 to Joomla 3.9.18)
Bugs fixed :
Fix incomplete utf8mb4 conversion from Joomla 3.9.17
Improved jQuery 3.5
Removed Create/Edit button in menu item in FrontEnd
Support for non-dotted domains in emails
Updated Codemirror to the latest version, build number 28691
Improved translation system and support for more languages, such as Welsh
Joomla 3.9.20 is an open source content management system (open source cms) available since July 14, 2020. This bug fix is related to the Joomla 3X series and includes the resolution of 6 security holes and more than 25 bug fixes and improvements.
Security issues fixed :
Low-priority - Core - CSRF in aj__install endpoint (affects Joomla 3.7.0 to Joomla 3.9.19)
Medium-priority - Core - Missed checks can lead to broken user groups table (affects Joomla 2.5.0 to Joomla 3.9.19)
Low-priority - Core - CSRF in com_privacy delete request attribute (affects Joomla 3.9.0 to Joomla 3.9.19)
Low-priority - Core - Variable manipulation via user table class (affects Joomla 3.0.0 to Joomla 3.9.19)
Low-priority - Core - Escaping mod_random_image link (affects Joomla 3.0.0 to Joomla 3.9.19)
Low-priority - Core - System information display can affect re-authentication or proxy (affects Joomla 3.0.0 to Joomla 3.9.19)
Bugs fixed :
Fix Joomla Update Component Download and Update Page
Joomla 3.9.21 is an open source content management system (open source cms) available since August 25, 2020. This bug fix is related to the Joomla 3X series and includes fixing 3 security holes and more than 20 bug fixes and improvements.
Security issues fixed :
Low Priority - Core - XSS in mod_latestactions (affects Joomla! 3.9.0 to 3.9.20)
Low Priority - Core - Open redirect in com_content vote attribute (affects Joomla! 3.0.0 to 3.9.20)
Low Priority - Core - Directory rotation in com_media (affects Joomla! 2.5.0 to 3.9.20)
Joomla 3.9.22 is an open source content management system (open source cms) available since October 6, 2020. This is a bug fix for Joomla 3X series and includes 25 bug fixes and improvements.
Bugs fixed :
Fixing issues with filter results in the Contact component
Fixing issues with Page Break
Fixing issues with Privacy Request
In Multilanguage, an error message is displayed when the language code url is saved as empty
In Multilanguage, you must use lowercase letters for the language code url
Joomla 3.9.23 is an open source content management system (open source cms) available since November 24, 2020. This is a bug fix for the Joomla 3X series, which includes fixing 7 security holes and more than 35 bug fixes and improvements.
Security issues fixed :
Low Priority - High Impact - com_finder ignores access level in autosuggest (affects Joomla! 2.5.0 to 3.9.22)
Low Priority - Medium Impact - Secrets exposed in global configuration page (affects Joomla! 2.5.0 to 3.9.22)
Low Priority - Medium Impact - Path traversal in mod_random_image (affects Joomla! 2.5.0 to 3.9.22)
Low Priority - High Impact - SQL injection in user list view (affects Joomla! 3.0.0 to 3.9.22)
Low Priority - Low Impact - User count on login (affects Joomla! 3.9.0 to 3.9.22)
Low Priority - Low Impact - CSRF in em_ilexport com_privacy attribute (affects Joomla! 3.9.0 to 3.9.22)
Low Priority - High Impact - Multiple main view ACL violations written (affecting Joomla! 1.7.0 to 3.9.22)
Bugs fixed :
TinyMCE Update
Improved module editing permissions in frontend
Fixed loss of transparency when cropping/resizing images
Joomla 3.9.24 is an open source content management system (open source cms) available since January 12, 2021. This is a bug fix for the Joomla 3X series, which includes fixing 3 security holes and more than 35 bug fixes and improvements.
Security issues fixed :
Low severity - Low impact - com_modules module name exposed (affects Joomla! 3.0.0 to 3.9.23)
Low severity - Medium impact - XSS in mod_breadcrumbs tag attribute (affects Joomla! 3.9.0 to 3.9.23)
Low severity - Medium impact - XSS in com_tags image parameters (affects Joomla! 3.1.0 to 3.9.23)
Bugs fixed :
Continued improvement of PHP 8 support
Fixed performance issue with compressed archives containing zip files
Joomla 3.9.25 is an open source content management system (open source cms) available since March 2, 2021. This is a bug fix for the Joomla 3X series, which includes fixing 9 security holes and more than 40 bug fixes and improvements.
Security issues fixed :
Low severity - Low impact - Insecure 2FA random number generation (affects Joomla! 3.2.0 to 3.9.24)
Joomla 3.9.26 is now available, this is a bug fix for the Joomla 3X series, which includes fixing 2 security holes and more than 30 bug fixes and improvements, which was released on April 13, 2021.
Security issues fixed :
Low Severity - Low Impact - XSS evasion in logo parameter error pages (affecting Joomla! 3.0.0 to 3.9.25)
Low Severity - Low Impact - Insufficient filters on module layout settings (affecting Joomla! 3.0.0 to 3.9.25)
And...
Bugs fixed :
Fix caching issues after site updates
Improved proxy settings
Optimized additional search parameters for site updates
Joomla 3.9.27 is now available, this is a bug fix for the Joomla 3X series, which includes fixing 3 security holes and more than 15 bug fixes and improvements, which was released on May 25, 2021.
Security issues fixed :
Low severity - Low impact - Adding HTML to the MediaHelper::canUpload execution block list (Affected Joomla! 3.0.0 to 3.9.26)
Low severity - Low impact - CSRF in AJAX endpoint reordering (Affected Joomla! 3.0.0 to 3.9.26)
Low severity - Low impact - CSRF in data upload endpoints (Affected Joomla! 3.0.0 to 3.9.26)
Joomla 3.9.28 is an open source content management system (open source cms) available since July 6, 2021. This is a bug fix for the Joomla 3X series, which includes fixing 5 security holes and more than 15 bug fixes and improvements.
Security issues fixed :
Low Severity - Low Impact - XSS Attacks in JForm Rules (Affects Joomla! 3.0.0 to 3.9.27)
Low Severity - Low Impact - DoS Attacks via User Groups Table Manipulation (Affects Joomla! 2.5.0 to 3.9.27)
Low Severity - Medium Impact - Forced Session Untermination (Affects Joomla! 2.5.0 to 3.9.27)
Low Severity - High Impact - Escalation of Privileges via com_installer (Affects Joomla! 2.5.0 to 3.9.27)
Low Severity - Medium Impact - XSS Attacks in com_media Image List (Affects Joomla! 3.0.0 to 3.9.27)
Bugs fixed :
Updated CA certificates
Smart search: Fixed issue inserting tokens into DB
Welcome to my website!
Due to the volume of conversations, it may take some time for me to respond to you, in any case, I will respond to you as soon as possible.
thanks
Admin