To complete, about 3rd-party packages of IHateMoney:

- The YunoHost app has been upgraded (upgrade your apps !) - NixOS 20.3 package has been upgraded (upgrade your distro !)

The version including the fix is 4.1.5.

Regards,

Jocelyn

Le mar. 28 juil. 2020 à 20:52, Alexis Métaireau alexis@notmyidea.org a écrit :

Hi folks,

A security release have been issued : 4.1.5 https://github.com/spiral-project/ihatemoney/releases/tag/4.1.5

This release fixes a serious security issue (CVE-2020-15120) https://github.com/spiral-project/ihatemoney/security/advisories/GHSA-67j9-c52g-w2q9.

All users are encouraged to upgrade.

Fixed

• Fix unauthorized access and modification of project data (CVE-2020-15120) (#663 https://github.com/spiral-project/ihatemoney/pull/663)

  Changed

• Change mobile icon link (#598 https://github.com/spiral-project/ihatemoney/pull/598)

• Improve French translation of email templates (#593 https://github.com/spiral-project/ihatemoney/pull/593)

  Added

• Add translations for Portuguese (Brazil), Tamil, Hindi

Thank you for using ihatemoney :-)

Alex _______________________________________________ Info mailing list -- info@ihatemoney.org To unsubscribe send an email to info-leave@ihatemoney.org