[ANNOUNCEMENT] diaspora* security release 0.4.1.3

19 views
Skip to first unread message

Dennis Schubert

unread,
Apr 11, 2015, 2:19:03 PM4/11/15
to diaspora...@googlegroups.com, diaspo...@googlegroups.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

We just released diaspora* version 0.4.1.3 which fixes OSVDB-120415: a
possible XSS vulnerability in Redcarpet, the Markdown interpreter we
use. Please refer to the OSVDB report for further details. Update
instructions can be found as usual at
https://wiki.diasporafoundation.org/Updating.

- - The diaspora* development team

[1]: http://osvdb.org/show/osvdb/120415
-----BEGIN PGP SIGNATURE-----

iQEcBAEBCAAGBQJVKWWTAAoJEOlJwL026k+uTa0H/jejVoa3dFsIF/e53dTVzqDR
IoaY85MzSfXn7UKqw06tNUfS9L2N8LwHzPOjVGJaPc369ThqW8Wb9FPWRSV1IepR
sxNiD/Ftxxl+7YCcLnR6pKIdvcn1cRE2eQqO0ukzG+c7D4VpwsCx4D+Q1SySmkVn
Hjm3ksPlrfd0/iPOq57W8ewlMo/A5BrxFAnerxlkNlBru4QcfPeP4NfAD7XiREn1
cghvyyCMLum/i6E75zF2pliZJLdA2NEzkMdJnuZMW1MMlUXxZwOcdWWJRf2ksyrc
bLzfKrfTqMBNTBwJypwInPOMUlmhMNHInhX6XxFXAVv3YQEYHeFK0g6EBJSKzuw=
=BrsM
-----END PGP SIGNATURE-----
Reply all
Reply to author
Forward
0 new messages