From d09c2d7b03680f9a3930cd5697196e303a2c8a1a Mon Sep 17 00:00:00 2001 From: Damian Mooyman Date: Wed, 6 Dec 2017 16:27:12 +1300 Subject: [PATCH] Added 3.5.6-rc1 changelog --- docs/en/04_Changelogs/rc/3.5.6-rc1.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/en/04_Changelogs/rc/3.5.6-rc1.md b/docs/en/04_Changelogs/rc/3.5.6-rc1.md index 4bb118918..765adb95c 100644 --- a/docs/en/04_Changelogs/rc/3.5.6-rc1.md +++ b/docs/en/04_Changelogs/rc/3.5.6-rc1.md @@ -4,6 +4,12 @@ ## Change Log +### Security + + * 2017-11-30 [6ba00e829]() Prevent disclosure of sensitive information via LoginAttempt (Damian Mooyman) - See [ss-2017-009](http://www.silverstripe.org/download/security-releases/ss-2017-009) + * 2017-11-30 [25e276cf3]() user agent invalidation on session startup (Damian Mooyman) - See [ss-2017-006](http://www.silverstripe.org/download/security-releases/ss-2017-006) + * 2017-11-29 [22ccf3e2f]() Ensure xls formulae are safely sanitised on output (Damian Mooyman) - See [ss-2017-007](http://www.silverstripe.org/download/security-releases/ss-2017-007) + ### Bugfixes * 2017-11-30 [84d7afb34]() Use baseDataClass for allVersions as with other methods (Daniel Hensby)