Security fixes

This release addresses one security issue:

• CVE-2024-41673

The details regarding the security vulnerability will be published on September 30th 2024, which is two months after the release date of this version. For more information, please refer to our Security Policy.

Upgrade notes

As usual, we recommend that you have a full backup, of the database, application code and static files.

To update, follow these steps:

1. Update your Gemfile:

gem "decidim", "0.27.8"
gem "decidim-dev", "0.27.8"

2. Run these commands to upgrade and make sure you get all the latest migrations:

bundle update decidim
bin/rails decidim:upgrade
bin/rails db:migrate

Changelog

Added

Nothing.

Changed

Nothing.

Fixed

• Fix malformed URL in version control page #13204

Removed

Nothing.

Developer improvements

Nothing.

Internal

Nothing.