DNN 10.2.0 was just released, if you're looking for information about the latest release, please look there.

However, if you have a site that has not yet upgraded to DNN 10, we have just released DNN 9.13.10, which includes resolutions to all known security vulnerabilities that affect DNN 9.13.9. Upgrade now to protect your site.

How This Release Came To Be

Historically, DNN Platform has not released security fixes for multiple versions. The advice for staying secure has always been to upgrade to the latest version. This remains the message. However, there were a number of community members who needed more time to move from DNN 9 to DNN 10, but still had a need to avoid the critical security vulnerabilities resolved in 10.x. Engage Software allows me to spend a significant amount of my time maintaining DNN week-to-week, which often includes implementing (and obfuscating) fixes for security vulnerabilities. As we heard about site administrators desiring a secure version of DNN 9, we started looking for a client who could co-sponsor the development of that release. Thanks to an anonymous partner, I was able to spend a week implementing the DNN 10 fixes into DNN 9, validating those fixes, modifying the Update Service to support fixes targeting multiple versions, and the re-obfuscating those fixes to, as much as we can, avoid revealing more details about them to adversaries than necessary.

Stay Safe and Carry On

Huge thanks go to our anonymous partner, as well as Engage Software, for the resources to make this release happen. It's so encouraging and rewarding to know that meeting the needs of one member of our open source community resulted in many others gaining a safer platform to build upon. Contributions to open source products like DNN Platform create benefits of outsized proportions to the initial investment, due to the network effects of a community building together. Thanks also to the rest of the committer team for reviews and guidance around this release process. Please review the DNN Upgrade documentation for details on how to apply the upgrade to your site.