DHIS2 patch release is now available - [SECURITY HOTFIX]

Dear all,

DHIS2 version is out as a HOTFIX release to address

This is the latest stable release for version 2.39, and supersedes patch 2.39.0.

These hotfixes are provided to make it easy for you to keep your system secure; provided you keep up to date with the latest patch versions.

The release note for this patch can be found here: Patch Release Note.


DHIS2 Release Team

Release Information Links
Release Note Patch Release Note
Upgrade notes 2.39 Upgrade notes
Download release and sample database Downloads - DHIS2
Documentation and Javadocs Home - DHIS2 Documentation
Source code on Github tag/
Demo instance DHIS 2 Demo - Sierra Leone
Docker docker pull dhis2/core:
for more docker image variants see dockerhub

Thank you for the update @phil though the links to the issues seem to be broken

Hi @WaluQ ,

Yes, sorry about that. The CVE’s (with details of the vulnerabilities) have not been published yet, but should be published in the next days.

Kind regards,

1 Like


The sharp-eyed among you may notice that the version in the DHIS2 About page says -SNAPSHOT:

Build revision 0ed6717

We usually remove the -SNAPSHOT part for a stable release, but we are modifying our process for hotfix releases and unfortunately this was overlooked this time. So, if you see the above version in your About page, please rest assured that you have the correct version.