metabase/metabase v1.39.7

Metabase® Enterprise Edition™ v1.39.7

on GitHub

Bug fixes

• Addresses the CVE-2021-44228 security vulnerability by updating log4j2 to 2.15.0

If you are unable to upgrade right away, then please add mitigation by setting the Java property log4j2.formatMsgNoLookups=true
JAR example: java ... -Dlog4j2.formatMsgNoLookups=true ... -jar metabase.jar
Docker example: docker run ... -e JAVA_OPTS="-Dlog4j2.formatMsgNoLookups=true" ...

Upgrading

You can download a .jar of the release, or get the latest on Docker. Make sure to back up your Metabase
database before you upgrade! Need help? Check out our
upgrading instructions.

Docker image: metabase/metabase-enterprise:v1.39.7
Download the JAR here: https://downloads.metabase.com/enterprise/v1.39.7/metabase.jar

Notes

SHA-256 checksum for the 1.39.7 JAR:

b07d0171a7394081644591d2bb5b9182943872d050e545ba978e42a990039926