ACTION REQUIRED NOW: Security release of OMERO.web 5.9.0

OMETeam · March 17, 2021, 3:51pm

As previously announced, today we are
releasing OMERO.web 5.9.0 which fixes several security vulnerabilities,
fixes a few bugs, contains some backwards-compatible API additions and adds a few new features. See Changelog for more details.

Security Fixes:

The vulnerabilities fixed by this release are:

2021-SV1 User Context (High)
2021-SV2 URL validation (High). Thanks to Teng Zheng for reporting the issue.

Installing the Software:

OMERO.web 5.9.0 is available from pypi.

Official Docker images are available as usual on Docker Hub with either
the latest or the 5.9 tag:

https://hub.docker.com/r/openmicroscopy/omero-web-standalone

You are invited to discuss this announcement here but installation issues may best be raised in a new topic.

All the best with your upgrades,

The OME Team

OMETeam · March 18, 2021, 11:20am

We inadvertently introduced a regression in OMERO.web 5.9.0.
We have now fixed the issue and released a 5.9.1 version. We have also improved our test coverage.

OMERO.web 5.9.1 is available from pypi.
Official Docker images are available as usual on Docker Hub with either
the latest or the 5.9 tag.

Apologies for the inconvenience.

The OME Team