Foreman 1.18.3 is now available, big thanks to everyone who contributed.
1.18.3 contains the following fixes:
#25169 - XSS on all pages that use breadcrumbs
#24807 - Toast notification sends strings through as HTML
#24844 - Audits display missing id for non-main objects changes
Please note that 1.18.3 is the last release for the 1.18 version. If you experience additional problems, we advise to upgrade to 1.19.
Installation quick start:
https://theforeman.org/manuals/1.18/quickstart_guide.html
Upgrade instructions:
https://theforeman.org/manuals/1.18/index.html#3.6Upgrade
Release notes:
https://theforeman.org/manuals/1.18/index.html#Releasenotesfor1.18
Lastly, do take note of the upgrade warnings and deprecations in this
release:
https://theforeman.org/manuals/1.18/index.html#Upgradewarnings
Packages may be found in the 1.18 directories on both deb.theforeman.org and yum.theforeman.org , and tarballs are on downloads.theforeman.org.
The GPG key used for RPMs and tarballs has the following fingerprint:
6973 3EEC D1AE 1E23 71FA 04EA 4C3D D0B3 57CE F41F