The downloads for the patches can all be found on the Qlik Download site. The release notes for SAP NetWeaver can also be found on the Qlik Download site.
Release Notes for the Qlik Sense patches can be found in the Qlik Community, on the new Release Notes page.
The information in this post and Security Bulletin are disclosed in accordance with our published Security and Vulnerability Policy.
Kind regards,
Qlik Global Support
5/25/2021 - Update to clarify a couple of questions:
The versions listed in the Security Bulletin are the fixed versions. Versions prior to those listed are the affected versions.
If you do not use the SAP connector, you still need to apply the patch for Qlik Sense.
There is a new release that includes the security fix as well so you will most likely want to apply that patch (both do not need to be applied in that case).
Thank you Qlik, Jamie san, for always providing the information in a very concise and clear manner since I can share with my team in our local language easily and quickly. Wonderful job!! Thank you!!
Hello @stvegerton, it's my understanding that it's a Qlik Sense issue and an SAP Connector issue. I am double checking for you. If I don't hear anything back today, I will let you know early next week. Also, I am about to blog about it, but there are new patches out for Qlik Patch Wednesday and it includes the security patch. So you may want to go to the latest patch.
@BI41andAll - the Security Bulletin linked above says anything before May 2021 (amongst others) is affected so that means May 2021 itself is not affected.
