Debian/Ubuntu users:
You can use our apt repository for Debian based distributions.
Download
Changelog and downloads for version 2.4.0
This page does not refer to the most recent version of SCM-Manager.
Go to the download of the latest VersionYou never want to miss a release again? Subscribe to our release feed
2.4.0 - (2020-08-14)
This version contains several known security vulnerabilities.
Expat vulnerability (core >=2.0.0 <=2.30.1)
Your instance is affected if you have the PlantUML-Plugin installed.Potential leak of password details in trace log (core >=3.0.0 <=3.6.0 || <2.46.5 || >=2.47.0 <2.48.4)
There is a potential leak that can give hints to passwords if the trace log is activated.Logback vulnerability (core <2.27.3)
The logback team announced a vulnerability in logback versions.LDAP plugin account hijacking vulnerability (core <=3.1.0)
We found a vulnerability that allows hijacking another user account.
If you are looking for an other version of SCM-Manager, please have a look at the archive.
Packages
Kubernetes users:
You can use our Helm repository for Kubernetes installations.
Red Hat/Centos/Fedora users:
You can use our yum repository for Red Hat based distributions.
Generic Linux/Unix users:
Download the package and follow the installation instructions.
Checksum (SHA256):
f02fa312b0c44866c4d34d550176cf898d3559ee58492c53264db111ac47f185
Windows users:
Download the package and follow the installation instructions.
Checksum (SHA256):
8b44408948ff81c68a6b85eb5cf57f34baef6213a954dcd11838c3679116580c
Changelog
Added
- Introduced merge detection for receive hooks (#1278)
- Anonymous mode for the web ui (#1284)
- Add link to source file in diff sections (#1267)
- Check versions of plugin dependencies on plugin installation (#1283)
- Sign PR merges and commits performed through ui with generated private key (#1285)
- Generic popover component to ui-components (#1285)
- Show changeset signatures in ui and add public keys (#1273)