Re: [Dhis2-users] critical security vulnerability found - immediate dhis upgrade required

Yes please download from https://www.dhis2.org/downloads . On Wed, Mar 15, 2017 at 11:58 AM, Hannan Khan wrote: > Dear Lars > > I find problem downloading from https://ci.dhis2.org/. The download was > very slow and interrupted. > > Is the links https://www.dhis2.org/download/releases/2.22/dhis.

Re: [Dhis2-users] critical security vulnerability found - immediate dhis upgrade required

Dear Lars I find problem downloading from https://ci.dhis2.org/. The download was very slow and interrupted. Is the links https://www.dhis2.org/download/releases/2.22/dhis.war has updated war files? Regards Hannan On Tue, Mar 14, 2017 at 12:10 AM, Lars Helge Øverland wrote: > Hi all, > > a c

Re: [Dhis2-users] critical security vulnerability found - immediate dhis upgrade required

Thanks Lars. On Tue, Mar 14, 2017 at 12:10 AM, Lars Helge Øverland wrote: > Hi all, > > a critical vulnerability has been detected in one of the software > libraries used by DHIS 2. This vulnerability allows an attacker to run > remote commands on the server as the user running Tomcat/DHIS 2. >

[Dhis2-users] critical security vulnerability found - immediate dhis upgrade required

Hi all, a critical vulnerability has been detected in one of the software libraries used by DHIS 2. This vulnerability allows an attacker to run remote commands on the server as the user running Tomcat/DHIS 2. We have patched all DHIS 2 versions from 2.21 to 2.26 / master. You can find new WAR fi