Redmine 4.0.4 and 3.4.11 released (incl. security fix)

Added by Jean-Philippe Lang 10 months ago

These 2 maintenance releases are available for download, you can review the changes in the Changelog.

Security: these 2 release include a fix for a persistent XSS vulnerability found in the Redmine Textile formatter. This issue was discovered and reported to the security team by Глеб Будило and fixed by Holger Just on behalf on Planio. People who uses Textile formatting should upgrade as soon as possible. Those who use Markdown or no text formatting are not vulnerable.


Added by Erik E 10 months ago

Thanks, especially @ Go MAEDA, you are doing a great job!!

Added by Jan from Planio 10 months ago

Thanks to everyone involved for the quick turnaround on this security release. We have also just updated Planio Security Scanner with the new versions and vulnerabilities.

Added by Federico Vera 10 months ago

Thanks! Great job!

Added by Humphries Parker 9 months ago

Thanks for the new information.

Added by Hexiang Zhang 8 months ago

Thanks,This is very helpful for our project management.