Platform security updates
- XWiki platform versions that include security fixes
- Recommended upgrade paths
- General security improvements information
Security updates
Security updates for XWiki
Security updates are published in accordance with the XWiki security policy and vulnerability disclosure process, and may include relevant release information, upgrade recommendations, and public references.
Security updates provide a structured overview of security-related changes, including platform releases, extension updates, key security fixes, and recommended upgrade actions.
The information published here may also support security newsletters and communications.
What is published here
Monthly updates provide public information intended to help administrators and organizations monitor relevant security updates and plan appropriate remediation actions.
Extension updates
- Extension releases containing security fixes
- Compatibility and upgrade notes
- Links to relevant public documentation
Administrator guidance
- Operational recommendations for administrators
- Upgrade and remediation priorities
- References to advisories, release notes, and supporting documentation
Disclosure boundaries
What is not published here
This section does not include sensitive technical details that could help exploitation, private customer impact analysis, internal remediation plans, or information about vulnerabilities that are still under embargo.
When a vulnerability is not publicly disclosed yet, the update may mention that security fixes are included in a release without exposing details that could put unpatched instances at additional risk.
Exploit details
Private customer impact analysis
Internal remediation plans
Embargoed vulnerability details
Recommended action
Keep XWiki instances updated
XWiki instances should be maintained on a supported version, and monthly security updates should be reviewed on a regular basis.
Where a direct upgrade is not feasible, the applicable security fixes should be assessed and an appropriate remediation plan should be defined. Depending on the context, this may involve a supported minor upgrade or a dedicated patch, where applicable.
- Review monthly updates Identify relevant platform releases, extension updates, and public references.
- Plan remediation Evaluate whether a supported upgrade or dedicated patch is the appropriate path.
- Apply and follow up Deploy the update, validate the instance, and keep track of remediation decisions.
Archive
Monthly security updates
Monthly security updates are listed below.
Stay informed about XWiki security updates
Review monthly updates regularly to identify relevant security fixes, plan upgrades, and follow recommended remediation actions.
View monthly updates