Download
Changelog and downloads for version 2.41.1
This page does not refer to the most recent version of SCM-Manager.
Go to the download of the latest VersionYou never want to miss a release again? Subscribe to our release feed
2.41.1 - (2023-02-16)
This version contains several known security vulnerabilities.
Potential leak of password details in trace log (core >=3.0.0 <=3.6.0 || <2.46.5 || >=2.47.0 <2.48.4)
There is a potential leak that can give hints to passwords if the trace log is activated.CAS plugin account hijacking vulnerability (core >=2.5.0 <=3.3.0)
We found a vulnerability that allows hijacking another user account.LDAP plugin account hijacking vulnerability (core <=3.1.0)
We found a vulnerability that allows hijacking another user account.
If you are looking for an other version of SCM-Manager, please have a look at the archive.
Packages
Debian/Ubuntu users:
You can use our apt repository for Debian based distributions.
Kubernetes users:
You can use our Helm repository for Kubernetes installations.
Red Hat/Centos/Fedora users:
You can use our yum repository for Red Hat based distributions.
Generic Linux/Unix users:
Download the package and follow the installation instructions.
Checksum (SHA256):
3fbc6dcdd796d4be121f8e640bb3be7b536b4719a4f9e865c0f2481ef898c59b
Windows users:
Download the package and follow the installation instructions.
Checksum (SHA256):
fb31649ad7db72c0c55f98834676127338160799cdd23808d41167934f2e92ff
Changelog
Fixed
- Unconditional force push from editor or merges