GitHub Enterprise 11.10.353 March 10, 2015 Download

GitHub Enterprise 11.10.353 Update Released

The 11.10.353 release for GitHub Enterprise is now available for download from The full release notes for 11.10.353 follow:

Security Fixes

FREAK attack

Researchers from INRIA, Microsoft Research and IMDEA have discovered a vulnerability that can cause affected servers to use weakened encryption on SSL connections, making it easier for an attacker with access to the connection to decrypt the communication.

GitHub Enterprise versions 2.0.7, 2.1.0 and newer are not vulnerable to this attack as they were already updated to OpenSSL 1.0.1-4ubuntu5.21 before this attack was published.

Release series end of life

The 11.10.353 release is part of the 11.10.340 release series. No more security patches will be released in this series after 7 July 2015, even for critical security issues. All customers are encouraged to upgrade to the latest release.