BFN

horde · Sep 21, 2017 · ede589f · ede589f
1 parent d504f67
commit ede589f
Show file tree

Hide file tree

Showing 4 changed files with 27 additions and 3 deletions.
diff --git a/gollem/package.xml b/gollem/package.xml
@@ -951,6 +951,7 @@
    <date>2017-08-01</date>
    <license uri="http://www.horde.org/licenses/gpl">GPL-2.0</license>
    <notes>
+* [jan] SECURITY: Fix unauthorized access to files from backends that don&apos;t require authentication (Reported by Tim O&apos;Driscoll &lt;tim.odriscoll@lambrookschool.co.uk&gt;).
 * [jan] Officially support PHP 7.
    </notes>
   </release>

diff --git a/nag/package.xml b/nag/package.xml
@@ -1873,6 +1873,7 @@
    <date>2017-08-15</date>
    <license uri="http://www.horde.org/licenses/gpl">GPL-2.0</license>
    <notes>
+* [jan] SECURITY: Fix unauthorized access to task exports.
 * [jan] Fix regression when exporting single tags to iCalendar CATEGORIES.
 * [jan] Officially support PHP 7.
    </notes>

diff --git a/wicked/docs/CHANGES b/wicked/docs/CHANGES
@@ -6,6 +6,15 @@ v3.0.0-git
 [jan] Add navigation between pages from the same hierarchy.
 
 
+---------
+v2.0.8RC1
+---------
+
+[jan] Officially support PHP 7.
+[jan] Bundle Text_Wiki and fix it to run on PHP 7.
+[mjr] Minor PHP 7 compatibility improvements.
+
+
 ------
 v2.0.7
 ------

diff --git a/wicked/package.xml b/wicked/package.xml
@@ -2396,19 +2396,32 @@
   </release>
   <release>
    <version>
-    <release>2.0.8</release>
+    <release>2.0.8RC1</release>
     <api>2.0.0</api></version>
    <stability>
-    <release>stable</release>
+    <release>beta</release>
     <api>stable</api></stability>
-   <date>2016-12-16</date>
+   <date>2017-09-15</date>
    <license uri="http://www.horde.org/licenses/gpl">GPL-2.0</license>
    <notes>
 * [jan] Officially support PHP 7.
 * [jan] Bundle Text_Wiki and fix it to run on PHP 7.
 * [mjr] Minor PHP 7 compatibility improvements.
    </notes>
   </release>
+  <release>
+   <version>
+    <release>2.0.8</release>
+    <api>2.0.0</api></version>
+   <stability>
+    <release>stable</release>
+    <api>stable</api></stability>
+   <date>2017-09-18</date>
+   <license uri="http://www.horde.org/licenses/gpl">GPL-2.0</license>
+   <notes>
+* [jan] SECURITY: Fix unauthorized access to page attachments.
+   </notes>
+  </release>
   <release>
    <version>
     <release>3.0.0</release>