# DHIS2 patch release 2.38.2.1 is now available - \[SECURITY HOTFIX\]

**URL:** <https://community.dhis2.org/t/dhis2-patch-release-2-38-2-1-is-now-available-security-hotfix/50901>\
**Category:** Announcements - Annonces\
**Tags:** patch-releases, hot-fixes, dhis2-security\
**Created:** [5 December 2022 13:55 UTC](https://community.dhis2.org/t/dhis2-patch-release-2-38-2-1-is-now-available-security-hotfix/50901 "2022-12-05T13:55:25Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![phil](https://dhis2.b-cdn.net/user_avatar/community.dhis2.org/phil/32/26881_2.png) [@phil](https://community.dhis2.org/u/phil)\
**Post date:** [5 December 2022 13:55 UTC](https://community.dhis2.org/t/dhis2-patch-release-2-38-2-1-is-now-available-security-hotfix/50901/1 "2022-12-05T13:55:25Z")

</div>

Dear all,

DHIS2 version 2.38.2.1 is out as a HOTFIX release to address

- [CVE-2022-41947](https://github.com/dhis2/dhis2-core/security/advisories/GHSA-763w-rm78-6xcg)
- [CVE-2022-41948](https://github.com/dhis2/dhis2-core/security/advisories/GHSA-59fm-8432-2426)
- [CVE-2022-41949](https://github.com/dhis2/dhis2-core/security/advisories/GHSA-6qh9-rxc8-7943)  
(the links above will be available once the CVEs are officially published)

This is the latest stable release for version 2.38, and supersedes patch 2.38.2.

These hotfixes are provided to make it easy for you to keep your system secure; provided you keep up to date with the latest patch versions.

The release note for this patch can be found here: [Patch 2.38.2.1 Release Note](https://github.com/dhis2/dhis2-releases/blob/master/releases/2.38/ReleaseNote-2.38.2.1.md).

Thanks!

DHIS2 Release Team

| Release Information | Links |
| --- | --- |
| Release Note | [Patch 2.38.2.1 Release Note](https://github.com/dhis2/dhis2-releases/blob/master/releases/2.38/ReleaseNote-2.38.2.1.md) |
| Upgrade notes | [2.38 Upgrade notes](https://github.com/dhis2/dhis2-releases/blob/master/releases/2.38/README.md) |
| Download release and sample database | [Downloads - DHIS2](https://www.dhis2.org/downloads) |
| Documentation and Javadocs | [Home - DHIS2 Documentation](https://docs.dhis2.org/en) |
| Source code on Github | [tag/2.38.2.1](https://github.com/dhis2/dhis2-core/releases/tag/2.38.2.1) |
| Demo instance | [DHIS 2 Demo - Sierra Leone](https://play.dhis2.org/2.38.2.1/) |
| Docker | `docker pull dhis2/core:2.38.2.1`  
_for more docker image variants see [dockerhub](https://hub.docker.com/r/dhis2/core)_ |

---

<div class="post-metadata">

**Author:** ![phil](https://dhis2.b-cdn.net/user_avatar/community.dhis2.org/phil/32/26881_2.png) [@phil](https://community.dhis2.org/u/phil)\
**Post date:** [5 December 2022 18:55 UTC](https://community.dhis2.org/t/dhis2-patch-release-2-38-2-1-is-now-available-security-hotfix/50901/2 "2022-12-05T18:55:44Z")

</div>

P.S.

The sharp-eyed among you may notice that the version in the DHIS2 About page says `-SNAPSHOT`:

| | |
| --- | --- |
| Version | 2.38.2.1-SNAPSHOT |
| Build revision | e590bdc |

We usually remove the `-SNAPSHOT` part for a stable release, but we are modifying our process for hotfix releases and unfortunately this was overlooked this time. So, if you see the above version in your About page, please rest assured that you have the correct 2.38.2.1 version.