summaryrefslogtreecommitdiff
path: root/CHANGELOG.md
diff options
context:
space:
mode:
authorHaelwenn (lanodan) Monnier <contact@hacktivis.me>2023-08-05 08:27:42 +0200
committerHaelwenn (lanodan) Monnier <contact@hacktivis.me>2023-08-05 08:27:42 +0200
commitb631180b38ac63029f08bef137b13231bcf57b59 (patch)
tree55a72082c7776290cdbbbd16fbf043f9c6fc4bb5 /CHANGELOG.md
parentcc848b78dca51fcd7e785eb92a7a3a4d5d1c419e (diff)
downloadpleroma-b631180b38ac63029f08bef137b13231bcf57b59.tar.gz
pleroma-b631180b38ac63029f08bef137b13231bcf57b59.zip
Release 2.5.4
Diffstat (limited to 'CHANGELOG.md')
-rw-r--r--CHANGELOG.md5
1 files changed, 5 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 468ec1012..9d9aadc6e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,11 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
### Removed
+## 2.5.54
+
+## Security
+- Fix XML External Entity (XXE) loading vulnerability allowing to fetch arbitary files from the server's filesystem
+
## 2.5.3
### Security