Confluence 2.7.2 is a recommended upgrade which fixes a security flaw and other bugs.

We have fixed a security flaw which allowed users who have 'View' permission (or higher) on a space to purge any page in that space. For details, please refer to the security advisory and related JIRA issue.

Other good fixes in this point release:

• The Rich Text editor no longer breaks links to pages in other spaces.
• Some customers have reported problems with permissions after upgrading to Confluence 2.7.1, where some space permissions or global permissions were lost if using a case-sensitive database. From Confluence 2.7.2, the space permissions and global permissions screens will display a message highlighting any case-sensitivity problems. We have also provided a routine to fix existing permissions affected by this issue — read the detailed instructions on running the routine.
• The JIRA Portlet macro now displays correctly when using trusted communication between JIRA and Confluence.
• Confluence 2.7.2 also clarifies the procedures around renewing your license before upgrading.