You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@allura.apache.org by br...@apache.org on 2026/08/24 16:03:25 UTC

(allura) branch master updated: publicize security fix

This is an automated email from the ASF dual-hosted git repository.

asf-gitbox-commits pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/allura.git


The following commit(s) were added to refs/heads/master by this push:
     new 69f39dc18 publicize security fix
69f39dc18 is described below

commit 69f39dc184550433242ecf62006f969bea6f8bad
Author: Dave Brondsema <da...@brondsema.net>
AuthorDate: Mon Aug 24 12:03:15 2026 -0400

    publicize security fix
---
 CHANGES | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CHANGES b/CHANGES
index 411c0763f..fc31dce70 100644
--- a/CHANGES
+++ b/CHANGES
@@ -35,6 +35,7 @@ Upgrade Instructions
     scripts/migrations/038-field-encryption-cleanup.sh
 
 Security Improvements
+ * [#8616] Fix Unauthenticated REST disclosure (CVE-2026-75099)
  * Python package upgrades
  * [#8610] Implement field level encryption for User's email addresses list
  * [#8613] Implement field level encryption for email address in user preferences