The foundation for your business
Fork me on GitHub
LedgerSMB 1.8.18 released
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

LedgerSMB 1.8.18 released

The LedgerSMB development team is happy to announce yet another new
version of its open source ERP and accounting application. This
release contains three fixes for security vulnerabilities. Users are
urged to upgrade as soon as possible.  Special thanks go to "ranjit-git",
and sudheendra17, users of the https://huntr.dev/ platform, for disclosing
these issues responsibly to the development team. And to the platform
itself for sponsoring the work of these researchers.
This release contains the following fixes and improvements:

Changelog for 1.8.18
* Check whether HTML comes from a valid source; CVE-2021-3693
* Apply HTML escaping on error messages; CVE-2021-3694 (#5754)
* Fix several issues in `bin/prepare-company-database` (#5769)
* Prevent the application being wrapped in a frame; CVE-2021-3731

For installation instructions and system requirements, see

The release can be downloaded from our download site at

The release can be downloaded from GitHub at

Or pulled from Docker Hub using the command
  $ docker pull ledgersmb/ledgersmb:1.8.18

These are the sha256 checksums of the uploaded files:

c3ed50b78a0cebc6ef7edfab6a5b1c7b6b5b2f5545bf2d680ad6c3f6cbca5be2  ledgersmb-1.8.18.tar.gz
133fae3563fa1be3eb4cd48ec06347187ba165bbeeb854c92ed03d9c08111ae0  ledgersmb-1.8.18.tar.gz.asc
announce mailing list -- ..hidden..
To unsubscribe send an email to ..hidden..