Blog

Important patch releases for your CKAN site

Please upgrade to CKAN 2.8.12 and CKAN 2.9.7 to patch important vulnerabilities

03-oct2022-new-patch-releases-BLOG.png

We are happy to announce that the new patch releases for CKAN 2.9.x and 2.8.x are now available to download and install. Note that following our revised release policy, this will be the last patch release on the 2.8.x line.

These patch releases are particularly important to apply as they address a vulnerability in user registration (CVE-2022-43685), so users should upgrade as soon as possible to the latest patch release for the CKAN version they are using.

Patch release upgrades are very straight-forward and do not contain any backwards incompatible changes or involve any change in the database or Solr schema.

For more details, check the CHANGELOG for the relevant version:

In case of doubt don't hesitate to ask for help. To discuss security related issues please email security@ckan.org. Otherwise you can ask your questions in the Discussions or the Gitter channel. As stated in the release policy, the latest patch release is the only one officially supported. For details on how to upgrade, see the following links depending on your install method:
More posts
csv conf3
In Category on 10 Oct 2025

Reflections from Bologna: CKAN and the Power of Community Data at csv,conf,v9

CKAN community members share insights from csv,conf,v9 in Bologna — exploring open data, community impact, and the power of digital public infrastructure.

OGP Summit-CKAN-blog
In Category on 09 Oct 2025

Open Government as Infrastructure: Themes and Signals from the 2025 OGP Summit

Spain co-chaired the 2025 OGP Summit with a focus on people, institutions, and technology. This article offers a systems-level view of open government, highlighting infrastructure challenges, policy signals, CKAN’s enabling role, and the themes shaping the future of transparency and participation.

Connect with CKAN