[IT-SecNots] CiviCRM Security Releases (4.4.7, 4.3.9, 4.2.19-LTS) - CIVI-SA-2014-004, CIVI-SA-2014-005

["CiviCRM" <info AT civicrm.org>]

There has been a security advisory for CiviCRM. We recommend you immediately upgrade to one of the following versions:

• CiviCRM 4.4.7 (latest version)

• CiviCRM 4.3.9

• CiviCRM 4.2.19 (LTS)

The security advisories resolved in these releases address issues with information disclosure to anonymous users and access bypass for users with CiviCRM export access. Read the security advisories for details:

• https://civicrm.org/advisory/civi-sa-2014-004-information-disclosure

• https://civicrm.org/advisory/civi-sa-2014-005-acl-bypass-export

A number of other issues have been fixed in these releases. Upgrade now for the most stable CiviCRM experience.

CiviCRM security announcements are available from https://civicrm.org/advisory and via the CiviCRM Security Notifications email list.

Go to the website | Unsubscribe from this mailing | Subscribe to this mailing | Opt out of all mailings

 

CiviCRM LLC

330 Upper Terrace

San Francisco

CA 94117

Go to the website | Unsubscribe from this mailing | Subscribe to this mailing | Opt out of all mailings