Skip to content

Commit e0e0422

Browse files
committed
Upates for new release
1 parent 01ab75a commit e0e0422

File tree

2 files changed

+4
-1
lines changed

2 files changed

+4
-1
lines changed

Diff for: SECURITY.md

+3
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,9 @@ To receive fixes for security vulnerabilities it is required to always upgrade t
2929
| V 0.6.15 | Cross-Site Scripting vulnerability on uploaded cover file names. Thanks to @ibarrionuevo ||
3030
| V 0.6.15 | Creating public shelfs is now denied if user is missing the edit public shelf right. Thanks to @ibarrionuevo ||
3131
| V 0.6.15 | Changed error message in case of trying to delete a shelf unauthorized. Thanks to @ibarrionuevo ||
32+
| V 0.6.16 | JavaScript could get executed on authors page. Thanks to @alicaz ||
33+
| V 0.6.16 | Localhost can no longer be used to upload covers. Thanks to @scara31 ||
34+
| V 0.6.16 | Another case where public shelfs could be created without permission is prevented. Thanks to @ibarrionuevo ||
3235

3336

3437
## Staement regarding Log4j (CVE-2021-44228 and related)

Diff for: cps/constants.py

+1-1
Original file line numberDiff line numberDiff line change
@@ -151,7 +151,7 @@ def selected_roles(dictionary):
151151
BookMeta = namedtuple('BookMeta', 'file_path, extension, title, author, cover, description, tags, series, '
152152
'series_id, languages, publisher')
153153

154-
STABLE_VERSION = {'version': '0.6.16 Beta'}
154+
STABLE_VERSION = {'version': '0.6.16'}
155155

156156
NIGHTLY_VERSION = {}
157157
NIGHTLY_VERSION[0] = '$Format:%H$'

0 commit comments

Comments
 (0)