GeoNetwork 4.4.12 and 4.2.17 released

GeoNetwork GeoNetwork User
1

Dear all,

We’re proud to announce the releases of GeoNetwork opensource v4.4.12 and v4.2.17.

These releases includes a security fix for a vulnerability affecting previous 4.4.x and 4.2.x versions. All users are strongly encouraged to upgrade to 4.4.12 or 4.2.17 as soon as possible.

GeoNetwork opensource 4.4.12

The change log provides an overview of new functionality and features.

You can find the software in GeoNetwork/v4.4.12 downloads.

GeoNetwork opensource 4.2.17

The change log provides an overview of new functionality and features.

You can find the software in GeoNetwork/v4.2.17 downloads.

Thanks to everyone who contributed and congratulations to the GeoNetwork community.

If you have any questions about this release please reply to this topic.

1 Like
2

Jody here acting as vulnerability coordinator.

The release notes have been updated with now published CVE information:

I trust everyone had plenty of time to upgrade!

We appreciate all the work that has gone into reporting and addressing these vulnerabilities. The GeoNetwork coordinated vulnerability disclosure policy is carefully setup to give everyone an opportunity to update prior to public disclosure.

Organizations reporting issues are reminded that GeoNetwork is a community project: and thus in effect self-serve. The magic of having access to the source code is an invitation to participate and make the software better (including addressing security issues found). Those seeking or expecting a vendor relationship can review the professional support providers linked to from our website.