From aac23cce7b577e6ed58ec9bf1fde4f04c26ff624 Mon Sep 17 00:00:00 2001 From: Laura Hausmann Date: Tue, 11 Mar 2025 01:03:54 +0100 Subject: [PATCH] Release: v2025.1-beta5.patch2.security1 --- CHANGELOG.md | 9 +++++++++ Directory.Build.props | 2 +- 2 files changed, 10 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index c89fd0d6..07bf3e08 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,12 @@ +## v2025.1-beta5.patch2.security1 +This is a security hotfix release. It's identical to v2025.1-beta5.patch2, except for the security mitigations listed below. Upgrading is strongly recommended for all server operators. + +### Backend +- Updated SixLabors.ImageSharp to 3.1.7 (addressing [GHSA-2cmq-823j-5qj8](https://github.com/advisories/GHSA-2cmq-823j-5qj8)) + +### Attribution +This release was made possible by project contributors: Laura Hausmann + ## v2025.1-beta5.patch2 This is a hotfix release. It's identical to v2025.1-beta5.patch1, except for a bunch of bugfixes. Upgrading is strongly recommended for all server operators running v2025.1-beta5 or v2025.1-beta5.patch1. diff --git a/Directory.Build.props b/Directory.Build.props index 100ddcf5..9714c2d5 100644 --- a/Directory.Build.props +++ b/Directory.Build.props @@ -27,7 +27,7 @@ 2025.1 - beta5.patch2 + beta5.patch2.security1