From 535a5ecad04c9c49105a77e7025fe9f4b4d23ba6 Mon Sep 17 00:00:00 2001 From: Mint Date: Sat, 2 Sep 2023 01:43:25 +0300 Subject: CommonAPI: Prevent users from accessing media of other users commit 1afde067b12ad0062c1820091ea9b0a680819281 upstream. --- changelog.d/check-attachment-attribution.security | 1 + 1 file changed, 1 insertion(+) create mode 100644 changelog.d/check-attachment-attribution.security (limited to 'changelog.d/check-attachment-attribution.security') diff --git a/changelog.d/check-attachment-attribution.security b/changelog.d/check-attachment-attribution.security new file mode 100644 index 000000000..e0e46525b --- /dev/null +++ b/changelog.d/check-attachment-attribution.security @@ -0,0 +1 @@ +CommonAPI: Prevent users from accessing media of other users by creating a status with reused attachment ID -- cgit v1.2.3 From ad6a6aa07b463f943828ba75aa4c3fe0b937e3a1 Mon Sep 17 00:00:00 2001 From: tusooa Date: Thu, 14 Dec 2023 20:14:41 -0500 Subject: Bump version to 2.6.1 --- changelog.d/check-attachment-attribution.security | 1 - 1 file changed, 1 deletion(-) delete mode 100644 changelog.d/check-attachment-attribution.security (limited to 'changelog.d/check-attachment-attribution.security') diff --git a/changelog.d/check-attachment-attribution.security b/changelog.d/check-attachment-attribution.security deleted file mode 100644 index e0e46525b..000000000 --- a/changelog.d/check-attachment-attribution.security +++ /dev/null @@ -1 +0,0 @@ -CommonAPI: Prevent users from accessing media of other users by creating a status with reused attachment ID -- cgit v1.2.3