Joomla 3.9.25 Security and Bug Fix Release

Joomla 3.9.25 Security Issues Fixed

• [20210301] Low Severity - Low Impact - Insecure randomness within 2FA secret generation (affecting Joomla! 3.2.0 through 3.9.24) More information »
• [20210302] Low Severity - Low Impact - Potential Insecure FOFEncryptRandval (affecting Joomla! 3.2.0 through 3.9.24) More information »
• [20210303] Low Severity - Moderate Impact - XSS within alert messages showed to users (affecting Joomla! 2.5.0 through 3.9.24) More information »
• [20210304] Low Severity - Moderate Impact - XSS within the feed parser library (affecting Joomla! 2.5.0 through 3.9.24) More information »
• [20210305] Low Severity - Low Impact - Input validation within the template manager (affecting Joomla! 3.2.0 through 3.9.24) More information »
• [20210306] Low Severity - Moderate Impact - com_media allowed paths that are not intended for image uploads (affecting Joomla! 3.0.0 through 3.9.24) More information »
• [20210307] Low Severity - Moderate Impact - ACL violation within com_content frontend editing (affecting Joomla! 3.0.0 through 3.9.24) More information »
• [20210308] Low Severity - Moderate Impact - Path Traversal within joomla/archive zip class (affecting Joomla! 3.0.0 through 3.9.24) More information »
• [20210309] Low Severity - Moderate Impact - Inadequate filtering of form contents could allow to overwrite the author field (affecting Joomla! 1.6.0 through 3.9.24) More information »

Joomla 3.9.25 Bug Fix and Improvements

• Fix Save as Copy tag #32454
• Fix published attribute for Tag field #32332
• Fix batch menu items #32380
• Stream transport should enable verify_peer_name when possible #16501
• Optimize the code for rename incorrectly cased files on update #32176
• Addional PHP 8 improvments #31977 #32374

Visit GitHub for the full list of bug fixes.

New Installations

Upgrade Packages

Please read the update instructions before updating and remember to clear your browser's cache after upgrading.

We are updating all our Joomla templates for Joomla 3.9.25. You can follow the Joomla 3.9.25 templates blog post for detail.

If you have any problem in updating, please contact us on our Support System.

Follow up all of the news of Joomla 4:

→ Joomla 4 Templates

→ Joomla 4 extensions

→ How to Migrate Joomla 3 to Joomla 4 Step by Step Tutorial

→ [SmartAddons] Products Support Status & Joomla 4 Update Plan

→ Joomla Announcement - Joomla 4 Stable 17th August

→ Differences Between the Joomla 3 and Joomla 4

→ Joomla 4 New Features

→ Joomla 4 News