A new patch release for OpenProject 3 (3.0.16) has been released which contains several security updates and bug fixes.
We advise everyone to update their OpenProject installations.
With OpenProject 3.0.16, the Rails version has been updated to 3.2.21 (#17468).
In addition, an older version of Net-LDAP has been upgraded which caused problems in combination with Apache DS (#17498).
In the previous OpenProject version the permission for “Spent time” was not applied properly. This has been fixed with OpenProject 3.0.16 (#17496).
A big thanks goes to everyone involved in fixing and reporting those bugs!