Merge pull request #493 from mkurz/play_2.8.16

Play 2.8.16
playframework · Jun 7, 2022 · 718800c · 718800c
2 parents 962e3af + 0afd87d
commit 718800c
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 2 deletions.
diff --git a/app/views/vulnerabilities.scala.html b/app/views/vulnerabilities.scala.html
@@ -27,6 +27,12 @@ <h2>Reporting vulnerabilities</h2>
 
             <h2>Play 2.8.x<h2>
 
+            <h3>Fixed in Play 2.8.16</h3>
+            <ul>
+                <li><a href="//github.com/playframework/playframework/security/advisories/GHSA-v8x6-59g4-5g3w">CVE-2022-31018</a> - Denial of service when binding forms from JSON</li>
+                <li><a href="//github.com/playframework/playframework/security/advisories/GHSA-p9p4-97g9-wcrh">CVE-2022-31023</a> - Dev error stack trace leaking into prod</li>
+            </ul>
+
             <h3>Fixed in Play 2.8.5</h3>
             <ul>
                 <li><a href="@routes.Security.vulnerability("CVE-2020-28923-ImproperRemovalofSensitiveInformationBeforeStorageorTransfer")">CVE-2020-28923-ImproperRemovalofSensitiveInformationBeforeStorageorTransfer </a> - Improper Removal of Sensitive Information Before Storage or Transfer

diff --git a/conf/playReleases.json b/conf/playReleases.json
@@ -1,10 +1,14 @@
 {
   "latest": {
-    "version": "2.8.15",
-    "date": "Mar 31 2022"
+    "version": "2.8.16",
+    "date": "Jun 2 2022"
   },
   "development": [],
   "previous": [
+    {
+      "version": "2.8.15",
+      "date": "Mar 31 2022"
+    },
     {
       "version": "2.8.13",
       "date": "Jan 11 2022"

diff --git a/public/markdown/changelog.md b/public/markdown/changelog.md
@@ -1,4 +1,11 @@
 
+## Play 2.8.16
+
+*Released 2 June 2022
+
+[All changes](https://github.com/playframework/playframework/compare/2.8.15...2.8.16/)
+[GitHub milestone](https://github.com/playframework/playframework/milestone/121?closed=1)
+
 ## Play 2.8.15
 
 *Released 31 March 2022