Redmine 1.0.5 bug/security fix released
Among 11 bug fixes, Redmine version:1.0.5 solves the incompatibility with the i18n 0.5.0 gem. The appropriate i18n gem version (0.4.2) is now required, you can install it using:
gem install i18n -v=0.4.2This release also fixes 3 security issues reported by joernchen of Phenoelit:
- logged in users may be able to access private data (affected versions: 1.0.x)
- persistent XSS vulnerability in textile formatter (affected versions: all previous releases)
- remote command execution in bazaar repository adapter (affected versions: 0.9.x, 1.0.x)
All Redmine users are highly recommended to upgrade to this latest release.
点赞0
评论
由 Mill Terence 在 将近 14 年 之前添加
A present right before Christmas. Tx to all contributors!
由 Pihl Thomas 在 将近 14 年 之前添加
Good job.
Merry Christmas!
BR
Thomas
由 Moor Deoren 在 将近 14 年 之前添加
Thanks team!