it-securitynotifies AT lists.piratenpartei.de

Betreff: Sicherheitsankündigungen

Listenarchiv

[IT-SecNots] CiviCRM Security Release (5.40.2, 5.39.2 ESR)

From: "CiviCRM" <info AT civicrm.org>
To: <it-securitynotifies AT lists.piratenpartei.de>
Subject: [IT-SecNots] CiviCRM Security Release (5.40.2, 5.39.2 ESR)
Date: Wed, 18 Aug 2021 11:15:55 -0700
Authentication-results: mail02.piratenpartei.de; dkim=pass header.d=civimail.civicrm.org header.s=apr2019 header.b="fIsY/G4c"; dmarc=pass (policy=quarantine) header.from=civicrm.org; spf=pass (mail02.piratenpartei.de: domain of b.13440.1944107.f8723fb77ebda655 AT civimail.civicrm.org designates 67.212.170.242 as permitted sender) smtp.mailfrom=b.13440.1944107.f8723fb77ebda655 AT civimail.civicrm.org
Job_id: 13440

There has been a security release for CiviCRM. Upgrades are available for:

CiviCRM v5.40.2: https://civicrm.org/download (release notes)
CiviCRM v5.39.2 ESR: https://civicrm.org/esr (https://lab.civicrm.org/esr/core/-/releases)

These upgrades address security issues in a third-party package:

CIVI-SA-2021-09: CKEditor (Multiple vulnerabilities)

Please note that this particular advisory has multiple solutions. Upgrading CiviCRM is the best solution, but if you cannot do that in a timely way, then review the advisory for alternatives and short-term mitigations.

Click this link to unsubscribe from this mailing list.

Click this link to opt out of all mail from CiviCRM.org.

Our mailing address is:

2367 24th Ave
San Francisco, California 94116
United States

[IT-SecNots] CiviCRM Security Release (5.40.2, 5.39.2 ESR), CiviCRM, 18.08.2021

Archiv bereitgestellt durch MHonArc 2.6.24.