Redmine 0.7.3 released
Yet another bug fix release. See the [[Changelog]] for more details.
As Redmine 0.7.3 fixes several XSS vulnerabilities, users are highly encouraged to upgrade to this new release.
No database migration is needed when upgrading from previous 0.7.x versions.
This release is still running with Rails 2.0.2.
It can be downloaded at Rubyforge.
点赞0
评论
The vulnerability report at JVN: http://jvn.jp/en/jp/JVN00945448/index.html
Jean-Philippe,
Can you please indicate which commit fixes the XSS vulnerabilities? I would like to apply the changes to an custom version of Redmine.
Cheers,
Mark
See r1612.