Project

General

Profile

Redmine 3.2.3 and 3.1.6 released

Added by Jean-Philippe Lang almost 8 years ago

Redmine 3.2.3 and 3.1.6 are maintenance releases that include a few fixes. They are available for download.

Security: these 2 releases fix several persistent XSS vulnerabilities (reported by Olga Yanushkevich).


Comments

Added by Deoren Moor almost 8 years ago

Thanks! Looking forward to the 3.3.0 release once it is done baking.

Added by Jan from Planio www.plan.io almost 8 years ago

Thank you for releasing it so quickly!

Added by Wim DePreter almost 8 years ago

Is it possible to make persistent XSS issues (#22924, #22925 and #22926) public, now they are released?
Thanks!

Added by Jean-Philippe Lang almost 8 years ago

The details about the vulnerabilities will be made public in a few weeks.

Added by Maxim Krušina almost 8 years ago

Hi, plz some ETA on releasing 3.3.0? Thanx a lot!

Added by Paulo Moreira almost 8 years ago

Upgrade from 2.6 to 3.2

Thanks, great work!