How do I find out about security updates?
Joomla emails super users when an update is out. You can also follow the Joomla Security Centre (developer.joomla.org/security-centre).
Why it matters
Security releases fix problems that become public as soon as they are released, so attackers start scanning for unpatched sites within days. The sooner you update, the smaller the risk.
Ways to hear about them
- Update emails: the Joomla! Update Notification plugin emails Super Users when a new version is out (on by default).
- The dashboard: the Home Dashboard notifications show "New version available".
- Joomla Security Centre (developer.joomla.org/security-centre) lists every security announcement for the core.
- Vulnerable Extensions List on the JED for extension problems.
Or let Joomla do it
From Joomla 5.4, automated core updates install new releases for you (see "Can Joomla update itself automatically?").
Sources
- Joomla! Update Notification – Joomla User Guide
- Joomla Security Centre – Joomla Developer Network
- Vulnerable Extensions – Joomla User Guide
