From aa1b9b4a401f0eec97980fb360217999da3df565 Mon Sep 17 00:00:00 2001 From: Laura Hausmann Date: Wed, 10 Jul 2024 16:19:31 +0200 Subject: [PATCH] Release: v2024.1-beta2.security1 --- CHANGELOG.md | 9 +++++++++ Iceshrimp.Backend/Iceshrimp.Backend.csproj | 2 +- 2 files changed, 10 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index d065724d..dd70f7c6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,12 @@ +## v2024.1-beta2.security1 +This is a security hotfix release. It's identical to v2024.1-beta2, except for referencing an updated version of the `System.Text.Json` dependency, fixing a Denial of Service vulnerability ([GHSA-hh2w-p6rv-4g7w](https://github.com/advisories/GHSA-hh2w-p6rv-4g7w)). Upgrading is strongly recommended for all server operators. + +### Backend +- Updated System.Text.Json to 8.0.4 (addressing [GHSA-hh2w-p6rv-4g7w](https://github.com/advisories/GHSA-hh2w-p6rv-4g7w)) + +### Attribution +This release was made possible by project contributors: Laura Hausmann + ## v2024.1-beta2 This release contains various features & bugfixes, including a security issue. Upgrading is strongly recommended for all server operators. diff --git a/Iceshrimp.Backend/Iceshrimp.Backend.csproj b/Iceshrimp.Backend/Iceshrimp.Backend.csproj index 69062cc9..496dc32e 100644 --- a/Iceshrimp.Backend/Iceshrimp.Backend.csproj +++ b/Iceshrimp.Backend/Iceshrimp.Backend.csproj @@ -7,7 +7,7 @@ true none 2024.1 - beta2 + beta2.security1 true false 1