release: v3.0.2

inveniosoftware · Jul 15, 2019 · fe9ec1f · fe9ec1f
1 parent 4ec4590
commit fe9ec1f
Show file tree

Hide file tree

Showing 3 changed files with 28 additions and 1 deletion.
diff --git a/docs/releases/index.rst b/docs/releases/index.rst
@@ -17,6 +17,7 @@ are here for the interested.
     :name: mastertoc
 
     maintenance-policy
+    v3.0.2
     v3.0.1
     v3.0.0
     v2

diff --git a/docs/releases/v3.0.2.rst b/docs/releases/v3.0.2.rst
@@ -0,0 +1,26 @@
+..
+    This file is part of Invenio.
+    Copyright (C) 2019 CERN.
+
+    Invenio is free software; you can redistribute it and/or modify it
+    under the terms of the MIT License; see LICENSE file for more details.
+
+Version 3.0.2
+=============
+
+*Released 2019-07-15*
+
+Invenio v3.0.2 fixes two security issues.
+
+Security fixes
+--------------
+
+- **Invenio-App:** Fixed a Host header injection vulnerability.
+
+- **Invenio-Records:** Fixed a Cross-Site Scripting vulnerability in the
+  administration interface.
+
+Maintenance policy
+------------------
+Invenio v3.0 will be supported with bug and security fixes until the release of
+Invenio v3.2 and minimum until 2019-06-07.
diff --git a/invenio/version.py b/invenio/version.py
@@ -14,4 +14,4 @@
 
 from __future__ import absolute_import, print_function
 
-__version__ = "3.0.1"
+__version__ = "3.0.2"