To complete, about 3rd-party packages of IHateMoney:
- The YunoHost app has been upgraded (upgrade your apps !) - NixOS 20.3 package has been upgraded (upgrade your distro !)
The version including the fix is 4.1.5.
Regards,
Jocelyn
Le mar. 28 juil. 2020 à 20:52, Alexis Métaireau alexis@notmyidea.org a écrit :
Hi folks,
A security release have been issued : 4.1.5 https://github.com/spiral-project/ihatemoney/releases/tag/4.1.5
This release fixes a serious security issue (CVE-2020-15120) https://github.com/spiral-project/ihatemoney/security/advisories/GHSA-67j9-c52g-w2q9.
All users are encouraged to upgrade.
Fixed
Fix unauthorized access and modification of project data (CVE-2020-15120) (#663 https://github.com/spiral-project/ihatemoney/pull/663)
Changed
Change mobile icon link (#598 https://github.com/spiral-project/ihatemoney/pull/598)
Improve French translation of email templates (#593 https://github.com/spiral-project/ihatemoney/pull/593)
Added
Add translations for Portuguese (Brazil), Tamil, Hindi
Thank you for using ihatemoney :-)
Alex _______________________________________________ Info mailing list -- info@ihatemoney.org To unsubscribe send an email to info-leave@ihatemoney.org