4.3.2 Release Notes

Name: "Manticore violet leaf" Release Date: July 14, 2022

• Download Rundeck
• Sign up for Release Notes
• Upgrade instructions

Overview

This release supersedes version 4.3.1 due to issues found with the re-encryption of certain types of keys from a critical with versions 4.2.0 and 4.2.1 of both Rundeck Open Source and Runbook Automation Self-Hosted (formerly Rundeck Enterprise).

For more details about the issue please read our CVE-2022-31044 page.

Upon upgrading to this version any Key Storage entries that may have been written as plain text will be re-encrypted automatically.

Note: 4.3.0 and 4.3.1 do not have the vulnerability, but does not include the patch to fully re-encrypt plain text values if 4.2.0 or 4.2.1 were used.