Joomla 3.9.20 update

Zojuist is er een security en bugfix update verschenen voor Joomla, versie 3.9.20. Alle klanten zijn weer direct geupdate.

Wilt u ook een onderhouds- en updatecontract zodat u er geen omkijken naar heeft? Neem dan contact op met Marc.

Wat is er aangepast in Joomla 3.9.20?

Joomla 3.9.20 includes 6 security vulnerability fixes and addresses several bugs, including:

Security Issues Fixed

  • Low Priority - Core - CSRF in com_installer ajax_install endpoint (affecting Joomla! 3.7.0 through 3.9.19) More information »
  • Moderate Priority - Core - Missing checks can lead to a broken usergroups table record (affecting Joomla! 2.5.0 through 3.9.19) More information »
  • Low Priority - Core - CSRF in com_privacy remove-request feature (affecting Joomla! 3.9.0 through 3.9.19) More information »
  • Low Priority - Core - Variable tampering via user table class (affecting Joomla! 3.0.0 through 3.9.19) More information »
  • Low Priority - Core - Escape mod_random_image link (affecting Joomla! 3.0.0 through 3.9.19) More information »
  • Low Priority - Core - System Information screen could expose redis or proxy credentials (affecting Joomla! 3.0.0 through 3.9.19) More information »

Bug fixes and Improvements

  • Upload & Update tab of Joomla Update Component: Fix to allow upload of ZIP filetype only #29877
  • Local database server: Allow optional port numbers #29567
  • Beez3 Template: Markup fix for the Tabs layout of com_contact #29636
  • Beez3 Template: Allow custom field editing on frontend #29577
  • Backend cache cleared when purging updates #29603

Visit GitHub for the full list of bug fixes.