Blog

News and posts from the SCM-Manager team

SCM-Manager 2.34.0

Posted on 2022-05-13 by Konstantin Schaper


Hi SCM-Manager Community,

we have done some serious spring cleaning in the last couple of weeks which included many improvements in the areas of accessibility and user experience as well as a large number of bugfixes.

There is too much to cover it all but a small selection of tweaks and new features are showcased in this blog post. For the full list, please head over to our changelog


Posted in scm-manager, release


SCM-Manager 2.33.0

Posted on 2022-04-29 by Eduard Heimbuch


Hey SCM-Manager Community,

today we can proudly present the first version of the SCM-Manager CLI client. We also fixed lots of small and some bigger bugs which were reported by you.

CLI

We and some community members have been wishing for a dedicated CLI for SCM-Manager for several years, and we finally got the opportunity to build a first version of it. The CLI client is available for many package managers and as a direct download on our website


Posted in scm-manager, release


SCM-Manager 2.32.0

Posted on 2022-03-10 by Matthias Thieroff


Hey SCM-Manager Community,

for the last month we focused on theming as we introduced the new dark mode. Besides, we worked on giving you the opportunity to provide feedback directly from SCM-Manager.

Dark mode

As high contrast mode targeted accessibility we also were in need for…


Posted in scm-manager, release


SCM-Manager 2.31.0

Posted on 2022-02-18 by Eduard Heimbuch


Hey SCM-Manager Community,

for the last month we worked on our backends and improved some stuff you hopefully should not notice. Therefore, this new release contains mostly smaller improvements and bugfixes.

Collapsing empty directories

One new feature we've added is collapsing…


Posted in scm-manager, release


XML-Parser Expat (CVE-2022-23852)

Posted on 2022-02-02 by Eduard Heimbuch


Hey SCM-Manager Community,

Maybe you have heard about a new vulnerability regarding Expat which is likely as dangerous as Log4Shell.

The SCM-Manager is only affected if you have the PlantUML-Plugin installed. We highly recommend uninstalling this plugin until we can provide a fixed version. If your SCM-Manager is running inside the Cloudogu Ecosystem you also need to take down the PlantUML Dogu


Posted in scm-manager, security


SCM-Manager 2.30.0

Posted on 2022-01-24 by Eduard Heimbuch


Hey SCM-Manager Community,

you may have read our last blog post warning you about a Path Traversal vulnerability in SCM-Manager. If you haven't already, please update your instance to the latest SCM-Manager version as soon as possible to fix this issue.

Alerting

We have already…


Posted in scm-manager, release, security


Path Traversal Vulnerability

Posted on 2022-01-17 by René Pfeuffer


Hey SCM-Manager Community,

thanks to an attentive user, we got notice of a path traversal vulnerability in SCM-Manager. Affected are all versions from 2.0.0 up to 2.29.0.

We released a hotfix 2.29.1.

Update now!

Your SCM-Manager Team


Posted in scm-manager, release, security


SCM-Manager - Recap 2021

Posted on 2022-01-03 by Eduard Heimbuch


Hey SCM-Manager Community,

It's the first Monday of the new year, and we just started working on the next major features to improve your SCM-Manager experience. But before going forward we wanted to do a little recap and share our SCM-Manager highlights of 2021.

Recap

We had 1…


Posted in scm-manager, release


SCM-Manager 2.28.0

Posted on 2021-12-23 by René Pfeuffer


Hey SCM-Manager Community,

some time has passed since 2.27.0, and the hassle around log4shell brought us some bugfix releases (because we use logback and not log4j, we had some less severe issues in SCM-Manager). But now it is time for a new feature release 2.28.0.

Branch Details


Posted in scm-manager, release


Log4Shell

Posted on 2021-12-13 by René Pfeuffer


Hey SCM-Manager Community,

We're sure you've heard about the vulnerability in log4j called Log4Shell. As far as we can say, SCM-Manager is not affected by this, because log4j is not used in SCM-Manager (for logging, we use Logback).

However, if you have installed plugins from external sources, you can check whether log4j is used somewhere by running this little script using the script plugin


Posted in scm-manager, security, release