Newscoop 3.5.5 and Newscoop 4 RC4 security releases

The vulnerabilities affect all versions of Newscoop prior to 3.5.4 and upgrade should be applied as soon as possible. 

 

It also affects any development, beta or RC versions of Newscoop 4.0 (up to RC3) - for these sites, immediate upgrade to Newscoop 4 RC4 is recommended. This is not an official stable release yet and not recommended for production servers. We also sneaked some other improvements and bug fixes into this release (here's the full changelog).

 

Here’s the full lowdown on how to upgrade. (Newscoop 4 users should also check the wiki.)  

 

Here are the tarballs for manual install:  

• Newscoop 3.5.5 download
• Newscoop 4 RC4 download

Further reading: What to look forward to in Newscoop 4...