Security Update: Mattermost 4.3.1 / 4.2.1 / 4.1.2 released

We are releasing a recommended security update via Mattermost 4.3.1, 4.2.1, and 4.1.2 for both Team and Enterprise Editions. This security update addresses a low severity vulnerability discovered during a security research review by Frans Rosén.

Follow the standard upgrade instructions to apply the updates.

Per the Mattermost Responsible Disclosure Policy, details of the update will be posted on our security updates page 14 days after release.

What’s new with Mattermost 4.3.1

Mattermost 4.3.1 also resolves the following bugs in the Mattermost 4.3 release:

• Fixed an upgrade issue where the database schema would appear to be out of date and throw a log warning (#7959).
• Fixed the Idle Timeout setting in config.json by changing the setting title from SessionIdleTimeout to SessionIdleTimeoutInMinutes (#7960).
• Fixed a regression where slash commands were not functional in Direct or Group Messages (#7915).

Install Mattermost 4.3.1

New to Mattermost? Download the latest version of the platform and try it for free.

Need help upgrading to the latest version of Mattermost? Head over here.

Upgrade to Mattermost Enterprise

Mattermost Enterprise Edition E10 and E20 are commercial versions of Mattermost designed for today’s leading organizations. For more information on features and pricing, check this out.

Need some help configuring everything? Whatever your needs, our support team has the expertise to help you get the most out of Mattermost. Grab a subscription today and enjoy custom upgrade and installation support from Mattermost.

Stay up-to-date with Mattermost releases

Want to be the first to learn when new Mattermost releases are available? Subscribe to our newsletter for the latest Mattermost news including feature releases, security updates, upcoming community events and new articles from the team.