🔒 Security Release for Mautic 3.0-3.2.2 versions
This is a security hotfix release to resolve two vulnerabilities reported in Mautic. This is the same release as 3.2.3, but with an important fix in the update script. More details below.
We recommend updating your Mautic instance as soon as possible.
For more information and CVE numbers please refer to the release announcement: https://www.mautic.org/blog/community/security-release-all-versions-mautic-prior-2-16-5-and-3-2-3
⚠️ Important note for users who are currently running 3.2.0 or later
Are you currently using Mautic 3.2.0 or later and do you update through the CLI (Command Line Interface)? Then the message below applies to you! This does not apply if you're updating through the UI (graphical interface).
When you're trying to update through the CLI, you might run into the following error:
Notice: Undefined index: message in /var/www/html/app/bundles/CoreBundle/Update/Step/InstallNewFilesStep.php on line 131
Failed to execute command php bin/console mautic:update:apply: exit status 1
This bug was introduced in Mautic 3.2.0 and fixed in 3.2.4. Please use the following workaround:
wget https://github.com/mautic/mautic/releases/download/3.2.4/3.2.4-update.zip
php bin/console mautic:update:apply --update-package=3.2.4-update.zip
php bin/console mautic:update:apply --finish
Note for developers
SHA1(3.2.4.zip)= 291ebabd2f12a0d8eced65a0adaa597db8371a39
SHA1(3.2.4-update.zip)= 33492b549e9f999fe3803cddde7eaa176e57e30b