[IT-SecNots] CiviCRM Security Release (5.48.0, 5.47.4, 5.45.4 ESR)

["CiviCRM" <info AT civicrm.org>]

There has been a security release for CiviCRM. Upgrades are available for:

• CiviCRM v5.48.0 (download, release notes)
• CiviCRM v5.47.4 (download, release notes)
• CiviCRM v5.45.5 ESR (info, download, release notes)

These upgrades address the following security issue:

• CIVI-SA-2022-06: Dompdf v1.2.1

Special notes:

• Depending on which PDF features you use, you may be able to remediate this security issue without a full upgrade. See the advisory for details.
• Earlier versions of 5.47 had an issue with CiviEvent and timezones. This was resolved in 5.47.3. See the Timezone Notice for details.

---

 

Click this link to unsubscribe from this mailing list.

Click this link to opt out of all mail from CiviCRM.org.

Our mailing address is:

1350 Ortega St
San Francisco, California 94122
United States