R-2.14.6

2016-05-09 19:19:07 -05:00
parent 85c37af1f4
commit cda35fd48a
3 changed files with 10 additions and 2 deletions
@@ -1,3 +1,11 @@
+## 2.14.6
+
+- Increased test coverage (thanks Richard)
+- Fixed some newly discovered security issues in admin:
+  CSRF vulnerability in admin that allows disabling apps
+  Brute force password attack vulnerability in admin
+  (thanks Narendra and Leonel)  
+
 ## 2.14.1-5

 - fixed two major security issues that caused the examples app to leak information
@@ -32,7 +32,7 @@ update:
 	echo "remember that pymysql was tweaked"
 src:
 	### Use semantic versioning
-	echo 'Version 2.14.5-stable+timestamp.'`date +%Y.%m.%d.%H.%M.%S` > VERSION
+	echo 'Version 2.14.6-stable+timestamp.'`date +%Y.%m.%d.%H.%M.%S` > VERSION
 	### rm -f all junk files
 	make clean
 	### clean up baisc apps
@@ -1 +1 @@
-Version 2.14.5-stable+timestamp.2016.04.13.22.22.13
+Version 2.14.6-stable+timestamp.2016.05.09.19.18.48