summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorHaelwenn (lanodan) Monnier <contact@hacktivis.me>2022-05-06 08:59:36 +0200
committerHaelwenn (lanodan) Monnier <contact@hacktivis.me>2022-05-06 09:01:33 +0200
commit57c486014c06715ff5cd5ad4361155d4a1776c23 (patch)
tree970a1d0515c784b7fc00a2934b8494badb569d85
parentfa3157df964d4f88d0fd1ce466a44333c8c7ef60 (diff)
Release 2.4.3
-rw-r--r--CHANGELOG.md6
-rw-r--r--mix.exs2
2 files changed, 7 insertions, 1 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 88ad0ada9..95405bb60 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
### Removed
+## 2.4.3 - 2022-05-06
+
+### Security
+- Private `/objects/` and `/activities/` leaking if cached by authenticated user
+- SweetXML library DTD bomb
+
## 2.4.2 - 2022-01-10
### Fixed
diff --git a/mix.exs b/mix.exs
index 9b4a3e239..927f39975 100644
--- a/mix.exs
+++ b/mix.exs
@@ -4,7 +4,7 @@ defmodule Pleroma.Mixfile do
def project do
[
app: :pleroma,
- version: version("2.4.2"),
+ version: version("2.4.3"),
elixir: "~> 1.9",
elixirc_paths: elixirc_paths(Mix.env()),
compilers: [:phoenix, :gettext] ++ Mix.compilers(),