There will be a security release for CiviCRM on Wednesday, December 4 (US/PST). The following updates will be provided:
- CiviCRM v5.20.0
- CiviCRM v5.19.4
- CiviCRM v5.13.8 ESR
We expect the release to become available near the end of the day (US/PST - TZ conversions). The issue is rated critical. Due to the atypical circumstances of this update, the Security Team is providing extra support for this release-window. This release-window coincides with the regularly scheduled 5.20.0 as well as the holiday fundraising season in the North America, and the patch is relatively small. Consequently, the release will include an extra backport (5.19.4) and work-around advice.
Our mailing address is:
2367 24th Ave
San Francisco, California 94116
United States