CKAN patch releases 2.10.1 and 2.9.9 now available

[Adrià Mercader]

Hi all,

We are happy to announce that the new patch releases for CKAN 2.10.x and 2.9.x are now available to download and install.

These patch releases are particularly important to apply as they address a vulnerability in the resource id validation (CVE-2023-32321 [1]), so users should upgrade as soon as possible to the latest patch release  for the CKAN version they are using.

Patch release upgrades are very straight-forward and do not contain any backwards incompatible changes or involve any change in the database or Solr schema.

Please refer to the CHANGELOG file to see what's included:

• https://docs.ckan.org/en/2.10/changelog.html#v-2-10-1-2023-05-24
• https://docs.ckan.org/en/2.9/changelog.html#v-2-9-9-2023-05-24

To discuss security related issues please email secu...@ckan.org.

You can find more details in the announcement post:

https://ckan.org/blog/new-security-releases-for-ckan-210-and-29

Best,

Adrià

[1] https://github.com/ckan/ckan/security/advisories/GHSA-446m-hmmm-hm8m