Redmine 4.0.4 and 3.4.11 released (incl. security fix)

Added by Jean-Philippe Lang almost 5 years ago

These 2 maintenance releases are available for download, you can review the changes in the Changelog.

Security: these 2 release include a fix for a persistent XSS vulnerability found in the Redmine Textile formatter. This issue was discovered and reported to the security team by Глеб Будило and fixed by Holger Just on behalf on Planio. People who uses Textile formatting should upgrade as soon as possible. Those who use Markdown or no text formatting are not vulnerable.

Comments

Added by Erik E almost 5 years ago

Thanks, especially @ Go MAEDA, you are doing a great job!!

Added by Jan from Planio www.plan.io almost 5 years ago

Thanks to everyone involved for the quick turnaround on this security release. We have also just updated Planio Security Scanner with the new versions and vulnerabilities.