Add release-notes/5.56.2.md
authorTim Otten <totten@civicrm.org>
Wed, 4 Jan 2023 00:08:48 +0000 (16:08 -0800)
committerAndie Hunt <andie@aghstrategies.com>
Wed, 1 Feb 2023 22:36:00 +0000 (17:36 -0500)
release-notes.md
release-notes/5.56.2.md [new file with mode: 0644]

index da1a79900d0722c9f7aed9e0a5d13c2a341f0719..01e40781c4019c32183c7c1953f2b5fea175ff68 100644 (file)
@@ -39,6 +39,15 @@ Released January 4, 2023
 - **[Credits](release-notes/5.57.0.md#credits)**
 - **[Feedback](release-notes/5.57.0.md#feedback)**
 
+## CiviCRM 5.56.2
+
+Released January 4, 2023
+
+- **[Synopsis](release-notes/5.56.2.md#synopsis)**
+- **[Security advisories](release-notes/5.56.2.md#security)**
+- **[Credits](release-notes/5.56.2.md#credits)**
+- **[Feedback](release-notes/5.56.2.md#feedback)**
+
 ## CiviCRM 5.56.1
 
 Released December 20, 2022
diff --git a/release-notes/5.56.2.md b/release-notes/5.56.2.md
new file mode 100644 (file)
index 0000000..36cc8bb
--- /dev/null
@@ -0,0 +1,39 @@
+# CiviCRM 5.56.2
+
+Released January 4, 2023
+
+- **[Synopsis](#synopsis)**
+- **[Security advisories](#security)**
+- **[Credits](#credits)**
+- **[Feedback](#feedback)**
+
+## <a name="synopsis"></a>Synopsis
+
+| *Does this version...?*                                         |          |
+| --------------------------------------------------------------- | -------- |
+| Change the database schema?                                     | no       |
+| Alter the API?                                                  | no       |
+| Require attention to configuration options?                     | no       |
+| Fix problems installing or upgrading to a previous version?     | no       |
+| Introduce features?                                             | no       |
+| Fix bugs?                                                       | no       |
+| **Fix security vulnerabilities?**                               | **yes**  |
+
+## <a name="security"></a>Security advisories
+
+* **[CIVI-SA-2023-01](https://civicrm.org/advisory/civi-sa-2023-01-help-subsystem-rce): RCE via Help Subsystem**
+* **[CIVI-SA-2023-02](https://civicrm.org/advisory/civi-sa-2023-02-civievent-xss): XSS via CiviEvent**
+* **[CIVI-SA-2023-03](https://civicrm.org/advisory/civi-sa-2023-03-asset-builder-xss): XSS via Asset Builder**
+
+## <a name="credits"></a>Credits
+
+This release was developed by the following authors and reviewers:
+
+Wikimedia Foundation - Eileen McNaughton; John Kingsnorth; JMA Consulting - Seamus Lee;
+CiviCRM - Tim Otten; Artful Robot - Rich Lott
+
+## <a name="feedback"></a>Feedback
+
+These release notes are edited by Tim Otten and Andie Hunt.  If you'd like to
+provide feedback on them, please login to https://chat.civicrm.org/civicrm and
+contact `@agh1`.