diff --git a/docs/en/changelogs/3.0.11.md b/docs/en/changelogs/3.0.11.md new file mode 100644 index 000000000..71191bd7e --- /dev/null +++ b/docs/en/changelogs/3.0.11.md @@ -0,0 +1,19 @@ +# 3.0.11 + +Minor security release + +## Security + + * 2014-04-16 [9d74bc4](https://github.com/silverstripe/sapphire/commit/9d74bc4) Potential DoS exploit in TinyMCE - See [announcement SS-2014-009](http://www.silverstripe.org/ss-2014-009-potential-dos-exploit-in-tinymce/) + * 2014-05-05 [9bfeffd](https://github.com/silverstripe/silverstripe-framework/commit/9bfeffd) Injection / Filesystem vulnerability in generatesecuretoken - See [announcement SS-2014-010](http://www.silverstripe.org/ss-2014-010-injection-filesystem-vulnerability-in-generatesecuretoken/) + * 2014-05-07 [0099a18](https://github.com/silverstripe/silverstripe-framework/commit/0099a18) Folder filename injection - See [announcement SS-2014-011](http://www.silverstripe.org/ss-2014-011-folder-filename-injection/) + +### Bugfixes + + * 2013-06-20 [f2c4a62](https://github.com/silverstripe/sapphire/commit/f2c4a62) ConfirmedPasswordField used to expose existing hash (Hamish Friedlander) + +## Changelog + + * [framework](https://github.com/silverstripe/silverstripe-framework/releases/tag/3.0.11) + * [cms](https://github.com/silverstripe/silverstripe-cms/releases/tag/3.0.11) + * [installer](https://github.com/silverstripe/silverstripe-installer/releases/tag/3.0.11) diff --git a/docs/en/changelogs/index.md b/docs/en/changelogs/index.md index 2a4ca8d3e..c884bc05e 100644 --- a/docs/en/changelogs/index.md +++ b/docs/en/changelogs/index.md @@ -9,6 +9,8 @@ For information on how to upgrade to newer versions consult the [upgrading](/ins ## Stable Releases + * [3.0.11](3.0.11) - 13 May 2014 + * [3.0.10](3.0.10) - 8 April 2014 * [3.0.5](3.0.5) - 2013-02-20 * [3.0.4](3.0.4) - 19 February 2013 * [3.0.3](3.0.3) - 26 November 2012 @@ -73,6 +75,8 @@ For information on how to upgrade to newer versions consult the [upgrading](/ins ## Alpha/beta/release candidate ## + * [3.0.11-rc1](rc/3.0.11-rc1) - 7 May 2014 + * [3.0.10-rc1](rc/3.0.10-rc1) - 1 April 2014 * [3.0.6-rc1](rc/3.0.6-rc1) - 2013-08-08 * [3.0.3-rc1](rc/3.0.3-rc1) - 6 November 2012 * [3.0.2-rc2](rc/3.0.2-rc2) - 12 September 2012