[IT-SecNots] CiviCRM Security Release (4.6.17, 4.7.8) - CIVI-SA-2016-09, CIVI-SA-2016-10

["CiviCRM" <info AT civicrm.org>]

There has been a security advisory for CiviCRM. We recommend you immediately upgrade to one of the following versions:

• CiviCRM v4.6.16
• CiviCRM v4.7.7

The security advisories resolved in these releases address issues with a misapplied permission and a potential information leak.

Read the security advisories for details:

• https://civicrm.org/advisory/civi-sa-2016-09-risk-of-information-disclosure-in-packaged-library
• https://civicrm.org/advisory/civi-sa-2016-10-insufficient-permissions-checking-when-editing-own-comment

A number of other issues have been fixed in these releases. Upgrade now for the most stable CiviCRM experience (https://civicrm.org/download).

CiviCRM security announcements are available from https://civicrm.org/advisory and via the CiviCRM Security Notifications email list.

 

---

 

Click this link to unsubscribe from this mailing list.

Click this link to opt out of all mail from CiviCRM.org.

Our mailing address is:

San Francisco, CA 94117
UNITED STATES