listmonk

v5.0.2 contains an important security update which disables the env and expandenv Sprig template functions preventing accessing of env variables from templates. This affects v4.0.0 - v5.0.1 installations that have unprivileged users in a multi-user setup.

How to upgrade

As always, take a backup of your database before upgrading.

Binary

Download the latest binary. Stop and replace the old binary. Run ./listmonk --upgrade. Start the app again.

Docker

# cd /directory/with/docker-compose.yml

docker-compose down
docker-compose pull && docker-compose run --rm app ./listmonk --upgrade
docker-compose up -d app db

Changelog

• d27d2c32 Remove dangerous tpl funcs in Sprig that’s enabled by default.
• 6fc6c1ec Fix Vietnamese translation issues (#2487)
• d6f5292d Fix subscribers unsubscription status being reset to confirmed on save (#2517)
• 8b8358e9 Add Nodion Deployment Option (#2518)
• 3f395085 updates simples3 to latest version (#2520)
• d027cb5d Add kloudbean hosting link to static website (#2508)
• bf502ba7 Update release details on the static homepage.