DHIS2 version 184.108.40.206 is out as a HOTFIX release to address CVE-2022-24848.
This is the latest stable release for version 2.37, and supersedes patch 2.37.6.
Please note that the next maintenance patch, 2.37.7, will be released within the next two weeks and will contain many more bug-fixes in addition to this security patch; however, as a hotfix release, 220.127.116.11 can be applied directly to instances already on 2.37.6 without additional testing.
These hotfixes are provided to make it easy for you to keep your system secure; provided you keep up to date with the latest patch versions.
The release note for this patch can be found here: Patch 18.104.22.168 Release Note.
DHIS2 Release Team
|Release Note||Patch 22.214.171.124 Release Note|
|Upgrade notes||2.37 Upgrade notes|
|Download release and sample database||Downloads - DHIS2|
|Documentation and Javadocs||Home - DHIS2 Documentation|
|Source code on Github||Release 126.96.36.199 · dhis2/dhis2-core · GitHub|
|Demo instance||DHIS 2 Demo - Sierra Leone|
for more docker image variants see dockerhub