[IT-SecNots] CiviCRM Security Release (5.74, 5.69-ESR)

["CiviCRM" <info AT civicrm.org>]

There has been a security release for CiviCRM (announcement). Upgrades are available for:

• CiviCRM v5.74.4 (download, release notes)
• CiviCRM v5.69.6 ESR (info, download, release notes)

These upgrades address the following security issue:

• CIVI-SA-2024-01: View Contact (Cross Site Scripting)
• CIVI-SA-2024-02: JSON Settings (Cross Site Scripting)
• CIVI-SA-2024-03: Smarty Security Policy (Arbitrary PHP Code Execution)

Click this link to unsubscribe from this mailing list.

Click this link to opt out of all mail from CiviCRM.org.

Our mailing address is:

1350 Ortega St
San Francisco, California 94122
United States