diff options
| author | dcc <dcc@logografos.com> | 2023-09-04 02:54:35 -0700 |
|---|---|---|
| committer | dcc <dcc@logografos.com> | 2023-09-04 02:54:35 -0700 |
| commit | a127041c8b3e31c9fa487dd5ca4faa29a0a59e6e (patch) | |
| tree | 563a301e6dfc8e419a787542f233976a5b761160 /CHANGELOG.md | |
| parent | 40bfe7919694619570c3e2192dff895c78ce44b9 (diff) | |
| download | anni-a127041c8b3e31c9fa487dd5ca4faa29a0a59e6e.tar.gz anni-a127041c8b3e31c9fa487dd5ca4faa29a0a59e6e.tar.bz2 anni-a127041c8b3e31c9fa487dd5ca4faa29a0a59e6e.zip | |
move to 2.5.5
Diffstat (limited to 'CHANGELOG.md')
| -rwxr-xr-x[-rw-r--r--] | CHANGELOG.md | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 9d9aadc..32ec440 100644..100755 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -14,7 +14,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). ### Removed -## 2.5.54 +## 2.5.5 + +## Security +- Prevent users from accessing media of other users by creating a status with reused attachment ID + +## 2.5.4 ## Security - Fix XML External Entity (XXE) loading vulnerability allowing to fetch arbitary files from the server's filesystem |