Redmine - Package Updates
-
[3.1.0]
- Update redmine to 5.0.2
- News announcement
- Updates commonmark gem version to 0.23.4 when Ruby >= 2.6 is used in order to fix a remote code execution vulnerability. Because the fixed version of the gem doesn't support Ruby 2.5, those instances that are using Redmine 5.0.*, Commonmark and Ruby 2.5, it is highly recommended to update Ruby version to at least 2.6 because it's the only way to get the update and the fix. Also, the next major Redmine version (5.1.0) already dropped support for Ruby 2.5 (#37159).
- Updates jQuery UI to 1.31.1 to fix 3 medium severity XSS vulnerabilities
- Fixes unauthorised Information Leak in QueryAssociationColumn and QueryAssociationCustomFieldColumn when the user has no permission to view on the associated object
-
[3.1.2]
- Update redmine to 5.0.3
- Security: Updates commonmark gem version to 0.23.4 when Ruby >= 2.6 is used in order to fix a remote code execution vulnerability. Because the fixed version of the gem doesn't support Ruby 2.5, those instances that are using Redmine 5.0.*, Commonmark and Ruby 2.5, it is highly recommended to update Ruby version to at least 2.6 because it's the only way to get the update and the fix. Also, the next major Redmine version (5.1.0) already dropped support for Ruby 2.5 (#37159).
- Security: Updates jQuery UI to 1.31.1 to fix 3 medium severity XSS vulnerabilities
- Security: Fixes unauthorised Information Leak in QueryAssociationColumn and QueryAssociationCustomFieldColumn when the user has no permission to view on the associated object
-
[3.3.0]
- Update redmine to 5.1.0
- News announcement
- Re-implement admin project list using ProjectQuery system (#33422)
- Background job and dedicated status for project deletion (#36691)
- Upgrade Admin/Users list to use the query system (#37674)
- Display calendar in vertical list layout on mobile screens (#33682)
- Auto watch issues on issue creation (#38238)
- Multiple issue ids in "Related to" filter (#38301)
- "Any searchable text" filter for issues (#38402)
- "contains any of" operator for text filters to perform OR search of multiple terms (#38435)
- OR search with multiple terms for "starts with" and "ends with" filter operators (#38456)
- New issues filter operators "has been", "has never been", and "changed from" (#38527)
-
[3.5.0]
- Disable external registration by default with OIDC
-
[3.5.1]
- Update OIDC plugin to 2.2.3
-
[3.5.2]
- Update OIDC plugin to 2.2.4
