From e06dd303db5c1a70a6a2bdb73276b672fc715534 Mon Sep 17 00:00:00 2001 From: Holger Just Date: Sun, 6 Jan 2013 23:56:23 +0100 Subject: [PATCH] Update Changelog for v2.7.4 --- doc/CHANGELOG.rdoc | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/doc/CHANGELOG.rdoc b/doc/CHANGELOG.rdoc index 0bb0d173..90588eb4 100644 --- a/doc/CHANGELOG.rdoc +++ b/doc/CHANGELOG.rdoc @@ -1,5 +1,11 @@ = ChiliProject changelog +== 2013-01-06 v2.7.4 + +* Security – Bug #1113: Potential XSS Vulnerability in Ruby on Rails +* Security – Bug #1114: XSS Vulnerability in strip_tags +* Security – Bug #1195: SQL Injection Vulnerability in Ruby on Rails (CVE-2012-5664) + == 2012-06-13 v2.7.3 * Bug #1036: Ruby on Rails Unsafe Query Generation Risk in Ruby on Rails (CVE-2012-2694)