diff options
| author | tusooa <tusooa@kazv.moe> | 2023-12-16 00:36:08 +0000 |
|---|---|---|
| committer | tusooa <tusooa@kazv.moe> | 2023-12-16 00:36:08 +0000 |
| commit | 6722b7f395f7da629d9c39b8c6eeb18ac8f500bc (patch) | |
| tree | ba54db78e571fc75b62170f74f764ebaf96478c0 /changelog.d | |
| parent | 6f654d534a1a606185c4f3543e7b1552f0a20566 (diff) | |
| parent | f07b134add9dc5e3ece6c5fcffe8aad6f753bab9 (diff) | |
| download | pleroma-6722b7f395f7da629d9c39b8c6eeb18ac8f500bc.tar.gz pleroma-6722b7f395f7da629d9c39b8c6eeb18ac8f500bc.zip | |
Merge branch 'release/2.6.1' into 'stable'
Release: 2.6.1
See merge request pleroma/pleroma!3999
Diffstat (limited to 'changelog.d')
| -rw-r--r-- | changelog.d/akkoma-xml-remote-entities.security | 1 | ||||
| -rw-r--r-- | changelog.d/check-attachment-attribution.security | 1 | ||||
| -rw-r--r-- | changelog.d/emoji-pack-sanitization.security | 1 | ||||
| -rw-r--r-- | changelog.d/otp_perms.security | 1 |
4 files changed, 0 insertions, 4 deletions
diff --git a/changelog.d/akkoma-xml-remote-entities.security b/changelog.d/akkoma-xml-remote-entities.security deleted file mode 100644 index 5e6725e5b..000000000 --- a/changelog.d/akkoma-xml-remote-entities.security +++ /dev/null @@ -1 +0,0 @@ -Fix XML External Entity (XXE) loading vulnerability allowing to fetch arbitary files from the server's filesystem diff --git a/changelog.d/check-attachment-attribution.security b/changelog.d/check-attachment-attribution.security deleted file mode 100644 index e0e46525b..000000000 --- a/changelog.d/check-attachment-attribution.security +++ /dev/null @@ -1 +0,0 @@ -CommonAPI: Prevent users from accessing media of other users by creating a status with reused attachment ID diff --git a/changelog.d/emoji-pack-sanitization.security b/changelog.d/emoji-pack-sanitization.security deleted file mode 100644 index f3218abd4..000000000 --- a/changelog.d/emoji-pack-sanitization.security +++ /dev/null @@ -1 +0,0 @@ -Emoji pack loader sanitizes pack names diff --git a/changelog.d/otp_perms.security b/changelog.d/otp_perms.security deleted file mode 100644 index a3da1c677..000000000 --- a/changelog.d/otp_perms.security +++ /dev/null @@ -1 +0,0 @@ -- Reduced permissions of config files and directories, distros requiring greater permissions like group-read need to pre-create the directories
\ No newline at end of file |