diff --git a/CHANGELOG.md b/CHANGELOG.md index 2f799a0ed..5b22c4164 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,13 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). +## 2.11.1 + +### Security + +- Update Bandit to version 1.14.0, which fixes HTTP/1.1, HTTP/2 and WebSocket denial-of-service and request smuggling vulnerabilities +- Update Hackney to version 4.9.1, which fixes unbounded response body buffering and decompression, CA pinning, redirect credential leaks and other vulnerabilities + ## 2.11.0 ### Security diff --git a/changelog.d/bandit-1.14.0.security b/changelog.d/bandit-1.14.0.security deleted file mode 100644 index f2161ae86..000000000 --- a/changelog.d/bandit-1.14.0.security +++ /dev/null @@ -1 +0,0 @@ -Update Bandit to version 1.14.0, which fixes HTTP/1.1, HTTP/2 and WebSocket denial-of-service and request smuggling vulnerabilities diff --git a/changelog.d/hackney-4.9.1.security b/changelog.d/hackney-4.9.1.security deleted file mode 100644 index 568903273..000000000 --- a/changelog.d/hackney-4.9.1.security +++ /dev/null @@ -1 +0,0 @@ -Update Hackney to version 4.9.1, which fixes unbounded response body buffering and decompression, CA pinning, redirect credential leaks and other vulnerabilities diff --git a/changelog.d/release-2.11.0.skip b/changelog.d/release-2.11.1.skip similarity index 100% rename from changelog.d/release-2.11.0.skip rename to changelog.d/release-2.11.1.skip diff --git a/mix.exs b/mix.exs index f2014ec3b..e2af5fda6 100644 --- a/mix.exs +++ b/mix.exs @@ -4,7 +4,7 @@ defmodule Pleroma.Mixfile do def project do [ app: :pleroma, - version: version("2.11.0"), + version: version("2.11.1"), elixir: "~> 1.17", elixirc_paths: elixirc_paths(Mix.env()), compilers: Mix.compilers(),