Apache Allura 1.19.1 has been released. (Version 1.19.0 was skipped) Security: a large number of security fixes have been applied, as well as general security hardening in many areas. We recommend upgrading immediately. Field-level encrypti…
Apache Allura 1.18.0 has been released. For full details of all the changes and fixes, see the CHANGES file. To upgrade to stronger password hashing with an existing .ini file, see auth.password.algorithm and auth.password.algorithm.old in
Apache Allura 1.17.1 has been released. It includes a security fix. For full details of all the changes and fixes, see the CHANGES file. CVE-2024-38379 Stored authenticated XSS Severity: Moderate Versions Affected: 1.4.0 through 1.17.0 Desc…
Apache Allura 1.17.0 has been released. It includes a critical security fix, adds OAuth2 support, and more. For full details of all the changes and fixes, see the CHANGES file. CVE-2024-36471 sensitive information exposure via DNS rebinding…
Apache Allura 1.16.0 has been released. It has a critical security fix and also drops Python 3.7 support. For full details of all the changes and fixes, see the CHANGES file. CVE-2023-46851 sensitive information exposure via import Severity…
Apache Allura 1.15.0 has been released, after a long time since 1.14.0. This release adds support for more Python versions (see next section) and Content-Security-Policy headers. Many other fixes and improvements are also included, they rel…
Apache Allura 1.13.0 has been released, after over a year of development, it includes some major updates and a huge list of small fixes and improvements. Some highlights are: This release supports Python 2.7, 3.6, and 3.7. It is the last re…
Apache Allura 1.12.0 has been released. New features include user mention notifications. Thanks to Shalitha and his Google Summer of Code project for implementing this and previous user-mention related functionality. Read more about Shalith…
Apache Allura 1.11.1 has been released. It is mostly a bugfix release, with one new feature being infotips for username mentions. To see all the bugs fixed and the upgrade instructions, check out the release changelog. XSS vulnerability whe…
Apache Allura 1.11.0 has been released, with new features including: CVE-2019-10085 Apache Allura XSS vulnerability in ticket user dropdown selector Severity: Important Versions Affected: 1.10.0 and earlier Description: A vulnerability exis…
Apache Allura 1.10.0 has been released, with new features including: This release also includes a critical security fix, so upgrading is strongly encouraged. There are many smaller improvements and fixes as well. To see all the details and
Apache Allura 1.9.0 has been released, with a brand new personal dashboard which shows your own tickets, merge requests, projects etc. Another notable enhancement is automatic saving of content before form submission - no more lost text if