Release: v2024.1-beta4.security2

This commit is contained in:
Laura Hausmann 2024-11-27 22:08:08 +01:00
parent 9150db442f
commit 1c41dd798e
No known key found for this signature in database
GPG key ID: D044E84C5BE01605
2 changed files with 13 additions and 1 deletions

View file

@ -1,3 +1,15 @@
## v2024.1-beta4.security2
This is a security hotfix release. It's identical to v2024.1-beta4.security1, except for the security mitigations listed below. Upgrading is strongly recommended for all server operators.
### Backend
- Several DoS & stack overflow vulnerabilities in the MFM parser were resolved
### Miscellaneous
- Performance of the MFM parser (and by extension, the frontend) should be significantly improved, as the backport of the security fixes also contains all other performance-related changes since v2024.1-beta4.
### Attribution
This release was made possible by project contributors: Laura Hausmann
## v2024.1-beta4.security1 ## v2024.1-beta4.security1
This is a security hotfix release. It's identical to v2024.1-beta4, except for the security mitigations listed below. Upgrading is strongly recommended for all server operators. This is a security hotfix release. It's identical to v2024.1-beta4, except for the security mitigations listed below. Upgrading is strongly recommended for all server operators.

View file

@ -32,7 +32,7 @@
<!-- Version metadata --> <!-- Version metadata -->
<PropertyGroup> <PropertyGroup>
<VersionPrefix>2024.1</VersionPrefix> <VersionPrefix>2024.1</VersionPrefix>
<VersionSuffix>beta4.security1</VersionSuffix> <VersionSuffix>beta4.security2</VersionSuffix>
</PropertyGroup> </PropertyGroup>
<ItemGroup> <ItemGroup>