Joomla 3.9.28 is now available. This is a security release for the 3.x series of Joomla which addresses 5 security vulnerabilities and contains 15 bug fixes and improvements.
What's in 3.9.28?
Joomla 3.9.28 includes 5 security vulnerability fixes and addresses several bugs, including:
Security Issues Fixed
-  Low Severity - Low Impact - XSS in JForm Rules field (affecting Joomla! 3.0.0 through 3.9.27) More information »
-  Low Severity - Low Impact - DoS through usergroup table manipulation (affecting Joomla! 2.5.0 through 3.9.27) More information »
-  Low Severity - Moderate Impact - Lack of enforced session termination (affecting Joomla! 2.5.0 through 3.9.27) More information »
-  Low Severity - High Impact - Privilege escalation through com_installer (affecting Joomla! 2.5.0 through 3.9.27) More information »
-  Low Severity - Moderate Impact - XSS in com_media imagelist (affecting Joomla! 3.0.0 through 3.9.27) More information »
Bug fixes and Improvements
- Update CA certificates #34693
- Smart Search: Fix inserting tokens to DB #34497
- Fix search suggestions for mixed-case searches #33942
Visit GitHub for the full list of bug fixes.
New InstallationsDownload Joomla 3.9.28
English (UK), 3.9.28 Full Package
Upgrade PackagesUpgrade Packages
Joomla 3 upgrade packages
Note: Please read the update instructions before updating.
Remember… Please clear your browser's cache after updating.
Found a bug? Report it on the Joomla Issue Tracker.
Questions? See the documentation wiki for FAQ’s regarding the 3.9.28 release.
A Huge Thank You to Our Volunteers!
A big thank you goes out to everyone that contributed to the 3.9 releases!
Make the next Joomla release even better
Download the upcoming releases from the nightly build page (for testing purposes only - do not use on production sites).
Want an even easier option? Get yourself over to launch.joomla.org - where you can also test Joomla 4.0 with just one click - no testing environment needed, nothing to install or set up (at all).
- Russian: Вышел релиз безопасности Joomla 3.9.28
- Italian: Disponibile aggiornamento sicurezza Joomla 3.9.28
- German: Joomla 3.9.28 Release
- Dutch: Joomla 3.9.28 is nu beschikbaar
- Turkish: Joomla! 3.9.28 Yayınlandı
- Greek: Joomla 3.9.28 - Ασφάλεια και Βελτιώσεις
- French: Joomla 3.9.28 est disponible
- Spanish: Joomla 3.9.28 ya está disponible