From a9f34e9dd18ec4f46fdcfee5d577c2b93228b407 Mon Sep 17 00:00:00 2001 From: James Cole Date: Tue, 16 Jul 2019 19:22:45 +0200 Subject: [PATCH] Update version. --- .sandstorm/changelog.md | 7 ++++++- .sandstorm/sandstorm-pkgdef.capnp | 4 ++-- .travis.yml | 2 +- changelog.md | 9 ++++++++- config/firefly.php | 2 +- 5 files changed, 18 insertions(+), 6 deletions(-) diff --git a/.sandstorm/changelog.md b/.sandstorm/changelog.md index 13b38d665b..c1aef0fdbc 100644 --- a/.sandstorm/changelog.md +++ b/.sandstorm/changelog.md @@ -1,5 +1,10 @@ +# 4.7.17.3 (API 0.9.2) + +- XSS bug in file uploads (x2), found by [@dayn1ne](https://github.com/dayn1ne). +- XSS bug in search, found by [@dayn1ne](https://github.com/dayn1ne). + # 4.7.17.2 (API 0.9.2) -- XSS bug in budget title. +- XSS bug in budget title, found by [@dayn1ne](https://github.com/dayn1ne). # 4.7.17 (API 0.9.2) - Support for Norwegian! diff --git a/.sandstorm/sandstorm-pkgdef.capnp b/.sandstorm/sandstorm-pkgdef.capnp index cdec1b1794..c8502e36a9 100644 --- a/.sandstorm/sandstorm-pkgdef.capnp +++ b/.sandstorm/sandstorm-pkgdef.capnp @@ -15,8 +15,8 @@ const pkgdef :Spk.PackageDefinition = ( manifest = ( appTitle = (defaultText = "Firefly III"), - appVersion = 28, - appMarketingVersion = (defaultText = "4.7.17.2"), + appVersion = 29, + appMarketingVersion = (defaultText = "4.7.17.3"), actions = [ # Define your "new document" handlers here. diff --git a/.travis.yml b/.travis.yml index 6716f0f425..e5b4f55c95 100644 --- a/.travis.yml +++ b/.travis.yml @@ -1,7 +1,7 @@ sudo: required language: bash env: - - VERSION=4.7.17.2 + - VERSION=4.7.17.3 dist: xenial diff --git a/changelog.md b/changelog.md index 9ad4d37c3b..f354cc7987 100644 --- a/changelog.md +++ b/changelog.md @@ -2,9 +2,16 @@ All notable changes to this project will be documented in this file. This project adheres to [Semantic Versioning](http://semver.org/). +## [4.7.17.3 (API 0.9.2)] - 2019-07-16 + +### Security +- XSS bug in file uploads (x2), found by [@dayn1ne](https://github.com/dayn1ne). +- XSS bug in search, found by [@dayn1ne](https://github.com/dayn1ne). + ## [4.7.17.2 (API 0.9.2)] - 2019-07-15 -- XSS bug in budget title. +### Security +- XSS bug in budget title, found by [@dayn1ne](https://github.com/dayn1ne). ## [4.7.17 (API 0.9.2)] - 2019-03-17 diff --git a/config/firefly.php b/config/firefly.php index 9c481fe5f4..f732748e35 100644 --- a/config/firefly.php +++ b/config/firefly.php @@ -93,7 +93,7 @@ return [ 'is_demo_site' => false, ], 'encryption' => null === env('USE_ENCRYPTION') || env('USE_ENCRYPTION') === true, - 'version' => '4.7.17.2', + 'version' => '4.7.17.3', 'api_version' => '0.9.2', 'db_version' => 10, 'maxUploadSize' => 15242880,