# \#security **URL:** https://community.dhis2.org/tag/security/17.md [Latest](https://community.dhis2.org/latest.md) · [Categories](https://community.dhis2.org/categories.md) · [Tags](https://community.dhis2.org/tags.md) --- ## [June 2026 PolinRider malware incident](https://community.dhis2.org/t/june-2026-polinrider-malware-incident/76210)
**Author:** [@phil](https://community.dhis2.org/u/phil)\ **Replies:** 1\ **Last updated:** [20 August 2026 12:15 UTC](https://community.dhis2.org/t/june-2026-polinrider-malware-incident/76210 "2026-08-20T12:15:31Z")
:warning: Security notice: June 2026 PolinRider malware incident in a number of DHIS2-related repositories. Please read this if you work with DHIS2 frontend code from any source other than apps.dhis2.org, and please share it onward. Two months ago we found active malware (publicly tracked as PolinRider / Void Dokk… --- ## [Updates to App Hub requirements: use Routes when connecting to external services](https://community.dhis2.org/t/updates-to-app-hub-requirements-use-routes-when-connecting-to-external-services/71005)
**Author:** [@JohanHole](https://community.dhis2.org/u/JohanHole)\ **Replies:** 3\ **Last updated:** [13 March 2026 09:40 UTC](https://community.dhis2.org/t/updates-to-app-hub-requirements-use-routes-when-connecting-to-external-services/71005 "2026-03-13T09:40:39Z")
Dear DHIS2 Community, To ensure high quality of our apps on the App Hub, now that Routes are available in all supported DHIS2 versions (v40+ at the time of this post), we are making the following changes to the App Hub … --- ## [DHIS2 security strengthening in Togo](https://community.dhis2.org/t/dhis2-security-strengthening-in-togo/59880)
**Author:** [@ksiliadin](https://community.dhis2.org/u/ksiliadin)\ **Replies:** 0\ **Last updated:** [8 July 2024 14:40 UTC](https://community.dhis2.org/t/dhis2-security-strengthening-in-togo/59880 "2024-07-08T14:40:48Z")
Please add ‘sysadmin’ as a tag when posting a new topic in the Server Administration - Administration-du-Serveur category. #audit --- ## [OS security and DHIS2](https://community.dhis2.org/t/os-security-and-dhis2/56968)
**Author:** [@Eric\_Boyd\_Ramirez](https://community.dhis2.org/u/Eric_Boyd_Ramirez)\ **Replies:** 4\ **Last updated:** [4 March 2024 15:55 UTC](https://community.dhis2.org/t/os-security-and-dhis2/56968 "2024-03-04T15:55:22Z")
Hi, We would like to follow the Center for Internet Security (CIS) guidelines for OS hardening. Ubuntu Security Guide (USG) already implements those recommendations which makes a number of changes compared to the stand… --- ## [Security Guidebook for Integration Implementers](https://community.dhis2.org/t/security-guidebook-for-integration-implementers/50396)
**Author:** [@ritazagoni](https://community.dhis2.org/u/ritazagoni)\ **Replies:** 2\ **Last updated:** [8 November 2022 12:15 UTC](https://community.dhis2.org/t/security-guidebook-for-integration-implementers/50396 "2022-11-08T12:15:11Z")
Hi DHIS2 community! We wanted to share a resource we developed for our OpenFn community: Security Guidebook for Data Integration Implementers. Even though we have 100+ integration projects under our belt, we’re seeking … --- ## [Looking for experience with WAF + DHIS2 installations](https://community.dhis2.org/t/looking-for-experience-with-waf-dhis2-installations/46051)
**Author:** [@ifoche](https://community.dhis2.org/u/ifoche)\ **Replies:** 0\ **Last updated:** [15 February 2022 18:13 UTC](https://community.dhis2.org/t/looking-for-experience-with-waf-dhis2-installations/46051 "2022-02-15T18:13:28Z")
Dear community, We’re looking for some advice in how to deal with Web Application Firewalls and DHIS2. In particular we are managing a complex installation of DHIS2 in WHO, where multiple departments contribute, and the… --- ## [App store update checks](https://community.dhis2.org/t/app-store-update-checks/45787)
**Author:** [@plinnegan](https://community.dhis2.org/u/plinnegan)\ **Replies:** 4\ **Last updated:** [28 January 2022 10:15 UTC](https://community.dhis2.org/t/app-store-update-checks/45787 "2022-01-28T10:15:07Z")
Hello, I was just thinking the other day about how updates to apps on the app hub are accepted without review (because of course it would be far too much effort for the team to review new and updated apps each time and a… --- ## [Urgent Log4j server security vulnerability - REQUIRES IMMEDIATE ATTENTION!](https://community.dhis2.org/t/urgent-log4j-server-security-vulnerability-requires-immediate-attention/45341)
**Author:** [@phil](https://community.dhis2.org/u/phil)\ **Replies:** 25\ **Last updated:** [15 December 2021 15:54 UTC](https://community.dhis2.org/t/urgent-log4j-server-security-vulnerability-requires-immediate-attention/45341 "2021-12-15T15:54:49Z")
Dear All, A very urgent security issue was made public today in a well-used library that affects many web services (see IBM Randori Recon). We have checked and can confirm that this issue also affects the following DHI… --- ## [DHIS2 security patch release 2.34.4, 2.35.5 and 2.36.1 are now available](https://community.dhis2.org/t/dhis2-security-patch-release-2-34-4-2-35-5-and-2-36-1-are-now-available/43336)
**Author:** [@jaime.bosque](https://community.dhis2.org/u/jaime.bosque)\ **Replies:** 13\ **Last updated:** [9 October 2021 18:38 UTC](https://community.dhis2.org/t/dhis2-security-patch-release-2-34-4-2-35-5-and-2-36-1-are-now-available/43336 "2021-10-09T18:38:10Z")
Important security updates now available for DHIS2 v2.34, v2.35, v2.36 Security patches are now available for the following DHIS2 versions: v2.34.4 – Update to v2.34.5 \[1\] v2.35.2, v2.35.3, v2.35.4 – Update to v2.35.5… --- ## [Security and data protection impact assessments for sharing](https://community.dhis2.org/t/security-and-data-protection-impact-assessments-for-sharing/41702)
**Author:** [@sgaudon](https://community.dhis2.org/u/sgaudon)\ **Replies:** 1\ **Last updated:** [20 January 2021 15:26 UTC](https://community.dhis2.org/t/security-and-data-protection-impact-assessments-for-sharing/41702 "2021-01-20T15:26:35Z")
Hi CoP colleagues, I am reaching out from LogicalOuctomes, as a follow up to several discussion threads regarding data protection in DHIS2 and safeguarding mechanisms. Like many community members, we’re looking at our DH… --- ## [Notes from the Security Bootcamp in Ghana](https://community.dhis2.org/t/notes-from-the-security-bootcamp-in-ghana/37108)
**Author:** [@maxk](https://community.dhis2.org/u/maxk)\ **Replies:** 0\ **Last updated:** [30 September 2019 08:10 UTC](https://community.dhis2.org/t/notes-from-the-security-bootcamp-in-ghana/37108 "2019-09-30T08:10:44Z")
Article submitted by DHIS2 expert Bob Jolliffe @bobj The Ghana Health Service hosted and organised a security bootcamp between 23rd to 27th of September in Aburi, Ghana. They were joined by participants from Togo, Ni… --- ## [Has anyone run Penetration or other security tests?](https://community.dhis2.org/t/has-anyone-run-penetration-or-other-security-tests/36754)
**Author:** [@Hesel\_Kate](https://community.dhis2.org/u/Hesel_Kate)\ **Replies:** 4\ **Last updated:** [19 August 2019 09:32 UTC](https://community.dhis2.org/t/has-anyone-run-penetration-or-other-security-tests/36754 "2019-08-19T09:32:06Z")
Curious to know if anyone else in the DHIS2 community has ever conducted a manual penetration test of their own instance? A collaborative discussion around around the test and potential solutions would be of interest to … --- ## [Security issue - upgrade action required for 2.28 and older versions](https://community.dhis2.org/t/security-issue-upgrade-action-required-for-2-28-and-older-versions/5388)
**Author:** [@Lars](https://community.dhis2.org/u/Lars)\ **Replies:** 1\ **Last updated:** [15 November 2018 12:09 UTC](https://community.dhis2.org/t/security-issue-upgrade-action-required-for-2-28-and-older-versions/5388 "2018-11-15T12:09:26Z")
Hi all, a potential serious security issue has been discovered with one of the libraries used by DHIS 2. The issue can potentially allow attackers to write or copy files to disk in arbitrary locations. The attacker need…