From 2ab3d072b0ed7d9a7adb43bb5a3d56b0d90ec619 Mon Sep 17 00:00:00 2001 From: Harald Eilertsen Date: Fri, 25 Mar 2022 22:14:39 +0100 Subject: Update changelog with missing fix and cve --- CHANGELOG | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index f04d0f639..91558b83b 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -28,8 +28,9 @@ Hubzilla 7.2 (2022-??-??) Bugfixes - Fix comments_closed date on posts where comments are disabled - - Fix open redirect via rpath query param - - Fix local file inclusion in redbasic theme + - Fix open redirect via rpath query param (CVE-2022-27256) + - Fix cross-site scripting via rpath query param (CVE-2022-27258) + - Fix local file inclusion in redbasic theme (CVE-2022-27257) - Fix baseurl for css and js - Fix duplicate IDs in login form - Fix unknown author not fetched if w2w comment arrives -- cgit v1.2.3 From 0d0f73fb67bbfcc53058cefded85ac36f951c7a7 Mon Sep 17 00:00:00 2001 From: Mario Vavti Date: Tue, 29 Mar 2022 11:38:59 +0200 Subject: update changelog --- CHANGELOG | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG b/CHANGELOG index 91558b83b..23033eb9f 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,4 +1,4 @@ -Hubzilla 7.2 (2022-??-??) +Hubzilla 7.2 (2022-03-29) - Streamline comment policy with downstream project - Add new function is_local_url() - Add helper function to escape URLs -- cgit v1.2.3