Mark Hoffmann (Progress Software) asked a question.
Release Date: 12 January 2026
Security Updates
Fix for CVE-2025-13444
Fixed a command injection Remote Code Execution (RCE) vulnerability in the cipher set UI and getcipherset API command; these have been updated to prevent unintended execution of remote commands. See the CVE details for more information.
Fix for CVE-2025-13447
Fixed a command injection Remote Code Execution (RCE) vulnerability in the UI interfaces and API commands listed below, which have been updated to prevent unintended execution of remote commands:
Other Updates
Additional fixes not directly related to system security have also been included in this release. Please see the release notes for the details, at the link below.
Links
Connection Manager for ObjectScale Release Notes and Documentation