diaspora* security release 0.5.6.1

3 views
Skip to first unread message

Dennis Schubert

unread,
Jan 21, 2016, 7:57:10 PM1/21/16
to diaspo...@googlegroups.com, diaspora...@googlegroups.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

We just released diaspora* version 0.5.6.1 which

* fixes Nokogiri CVE-2015-7499
* fixes unsafe "Remember me" cookies in Devise

Update instructions can be found as usual at
https://wiki.diasporafoundation.org/Updating.
- --
Dennis Schubert
http://schub.io
xmpp:dens...@dsx.cc
-----BEGIN PGP SIGNATURE-----

iQEcBAEBCAAGBQJWoX5dAAoJEOlJwL026k+uoHIH/2OJiSIOEJvpUDiszt3V7tuE
jhJMCB/rC2VajpI2X7U/QdUhAQrLeoZdsezhTxObps77yD9+ZOL3iytgtnIlnu2W
XKOPe8jJH2cmiPoUy2bRbtYrzw/fp4naBY/pvgFRXhC/9PVTjfW2hCMj1ly5vrY4
loWII4V2C8Kr6nprPuyYrcpAdjsZHLWcKn7WTgBj3En4R/OrT2n4y4McEjhJlMdV
LcSr7QTJgiito4rxzXuOAdw6eFf16ntKCZd31frZZOGXg7/jo6pCGG9F3YYb5vAN
mUTBPH0uK8HM731fmxDKnCXnf39YZ1kQ6shZ0fxgAheqYyVO6jhkDi4/nfB0/Kw=
=t6nr
-----END PGP SIGNATURE-----
Reply all
Reply to author
Forward
0 new messages