From aa4e5c43fbb6d976aa7f72326805ab7af15ac48e Mon Sep 17 00:00:00 2001 From: Daniel Gerhardt <code@dgerhardt.net> Date: Wed, 6 Jul 2016 11:20:24 +0200 Subject: [PATCH] Release version 2.0.4 --- CHANGELOG.md | 8 ++++++++ pom.xml | 2 +- 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 0a199854..177678c6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,13 @@ # Changelog +## 2.0.4 +This release fixes a security vulnerability caused by the CORS implementation. +Support for cross-origin requests has been removed. Use ARSnova version 2.2 or +newer for proper CORS. (Reported by Rainer Rillke at Wikimedia) + +Additional changes: +* Libraries have been upgraded to fix potential bugs + ## 2.0.3 This release fixes a security vulnerability in the account management API. It is highly recommended to upgrade if you are using database authentication. diff --git a/pom.xml b/pom.xml index 71bb83c7..674c8f42 100644 --- a/pom.xml +++ b/pom.xml @@ -3,7 +3,7 @@ <modelVersion>4.0.0</modelVersion> <groupId>de.thm.arsnova</groupId> <artifactId>arsnova-backend</artifactId> - <version>2.0.4-SNAPSHOT</version> + <version>2.0.4</version> <packaging>war</packaging> <properties> -- GitLab