DHIS2 patch release 2.36.10 is now available - [SECURITY HOTFIX]

Dear all,

DHIS2 version 2.36.10 (patch release) is out as a HOTFIX for the vulnerability referred to as “spring4shell”.

This is the latest stable release for version 2.36, and supersedes releases 2.36.0 to 2.36.9.

The release note for this patch can be found here: Patch 2.36.10 Release Note.


DHIS2 Release Team

Release Information Links
Release Note Patch 2.36.10 Release Note
Upgrade notes 2.36 Upgrade notes
Download release and sample database Downloads - DHIS2
Documentation and Javadocs Home - DHIS2 Documentation
Source code on Github Release 2.36.10 · dhis2/dhis2-core · GitHub
Demo instance DHIS 2 Demo - Sierra Leone
Docker docker pull dhis2/core:2.36.10
for more docker image variants see dockerhub

A post was merged into an existing topic: Indicators having dataset metrics type in denominator doesnt work in 2.36.9

@phil thank you so much. Will a hotfix for 2.37 be forthcoming shortly? Thanks! Simon.

Hi @Guy_Ekani

Yes, please note that this is not a maintenance patch with bugfixes, only a security hotfix to secure against the recent “spring4shell” vulnerability.

1 Like

Hi @swoodworth

Yes, we hope to get the 2.37.5 security hotfix out very soon!
(later today if possible :wink: )

1 Like