X-Git-Url: https://git.logografos.com/?a=blobdiff_plain;f=CHANGELOG.md;h=32ec440de55b707d01be37e21f1517542c9cf7d9;hb=a127041c8b3e31c9fa487dd5ca4faa29a0a59e6e;hp=9d9aadc6e8a0162d8944622f783a6301fefd6cfa;hpb=40bfe7919694619570c3e2192dff895c78ce44b9;p=anni diff --git a/CHANGELOG.md b/CHANGELOG.md old mode 100644 new mode 100755 index 9d9aadc..32ec440 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -14,7 +14,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). ### Removed -## 2.5.54 +## 2.5.5 + +## Security +- Prevent users from accessing media of other users by creating a status with reused attachment ID + +## 2.5.4 ## Security - Fix XML External Entity (XXE) loading vulnerability allowing to fetch arbitary files from the server's filesystem