29 Jul
2020
29 Jul
'20
8:50 a.m.
To complete, about 3rd-party packages of IHateMoney:
- The YunoHost app has been upgraded (upgrade your apps !)
- NixOS 20.3 package has been upgraded (upgrade your distro !)
The version including the fix is 4.1.5.
Regards,
Jocelyn
Le mar. 28 juil. 2020 à 20:52, Alexis Métaireau
<alexis(a)notmyidea.org> a écrit :
Hi folks,
A security release have been issued : 4.1.5
<https://github.com/spiral-project/ihatemoney/releases/tag/4.1.5>
This release fixes a serious security issue (CVE-2020-15120)
<https://github.com/spiral-project/ihatemoney/security/advisories/GHSA-67j9-c52g-w2q9>.
All users are encouraged to upgrade.
Fixed
* Fix unauthorized access and modification of project data
(CVE-2020-15120) (#663
<https://github.com/spiral-project/ihatemoney/pull/663>)
Changed
* Change mobile icon link (#598
<https://github.com/spiral-project/ihatemoney/pull/598>)
* Improve French translation of email templates (#593
<https://github.com/spiral-project/ihatemoney/pull/593>)
Added
* Add translations for Portuguese (Brazil), Tamil, Hindi
Thank you for using ihatemoney :-)
Alex
_______________________________________________
Info mailing list -- info(a)ihatemoney.org
To unsubscribe send an email to info-leave(a)ihatemoney.org