The Evergreen Community announces the release of Evergreen 3.8.3, 3.9.2, and 3.10.1. These releases are available from the downloads page.

These releases include various bugfixes as well as fixes for two security issues. One security fix adds protections for denial of service caused by excessive catalog searches, while the other adds validation for a URL parameter used in the public catalog.

It is recommended that all Evergreen sites upgrade as soon as possible.

All of these new releases contain additional bug fixes unrelated to the security issue. For more information on the changes in these releases, please consult their release notes:

• 3.8.3
• 3.9.2
• 3.10.1

The initial 3.10.0 release tarball was missing some components resulting in upgrades using the previous version of the staff client and new installations not allowing staff access at all. A repaired 3.10.0a tarball is available on the downloads page. Installations directly from git were not affected.

If you have previously installed Evergreen 3.10.0 check the version reported in the staff client by opening the menu in the upper right and choosing About. If you do not see Evergreen Version 3.10.0 you should re-run the installation steps with the updated download.

The Evergreen Community is pleased to announce the release of Evergreen 3.8.2. This release contains bug fixes for administration, cataloging, the staff client, circulation, course materials, and the public catalog.

For more information, please see the release notes.

The Evergreen Community wishes to thank those who contributed code, testing, and documentation to this release. Thank you to everyone who works to make Evergreen better!

Evergreen 3.8.2 can be downloaded from the Evergreen downloads page.