diff --git a/docs/releases/index.rst b/docs/releases/index.rst index d83aa2933e..d8603a7a72 100644 --- a/docs/releases/index.rst +++ b/docs/releases/index.rst @@ -17,6 +17,7 @@ are here for the interested. :name: mastertoc maintenance-policy + v3.0.2 v3.0.1 v3.0.0 v2 diff --git a/docs/releases/v3.0.2.rst b/docs/releases/v3.0.2.rst new file mode 100644 index 0000000000..ae1ef38501 --- /dev/null +++ b/docs/releases/v3.0.2.rst @@ -0,0 +1,26 @@ +.. + This file is part of Invenio. + Copyright (C) 2019 CERN. + + Invenio is free software; you can redistribute it and/or modify it + under the terms of the MIT License; see LICENSE file for more details. + +Version 3.0.2 +============= + +*Released 2019-07-15* + +Invenio v3.0.2 fixes two security issues. + +Security fixes +-------------- + +- **Invenio-App:** Fixed a Host header injection vulnerability. + +- **Invenio-Records:** Fixed a Cross-Site Scripting vulnerability in the + administration interface. + +Maintenance policy +------------------ +Invenio v3.0 will be supported with bug and security fixes until the release of +Invenio v3.2 and minimum until 2019-06-07. diff --git a/invenio/version.py b/invenio/version.py index 9c4ad4eb48..8ae48e8abf 100644 --- a/invenio/version.py +++ b/invenio/version.py @@ -14,4 +14,4 @@ from __future__ import absolute_import, print_function -__version__ = "3.0.1" +__version__ = "3.0.2"