openproject/docs/release-notes/5-0-20/README.md

---
  title: OpenProject 5.0.20
  sidebar_navigation:
      title: 5.0.20
  release_version: 5.0.20
  release_date: 2016-08-16
---


# OpenProject 5.0.20

OpenProject 5.0.20 contains a Rail security update. It upgrades Rails to
4.2.7.1 to address the following
CVEs:

[CVE-2016-6317](https://groups.google.com/forum/#!topic/ruby-security-ann/WccgKSKiPZA)  
[CVE-2016-6316](https://groups.google.com/forum/#!topic/ruby-security-ann/8B2iV2tPRSE)

We strongly recommend the update to the current version.

For further information on the release, please take a look at
[GitHub](https://github.com/opf/openproject/tree/v5.0.20).