From 9dd3c6a3aed8f50044111ea9aee0afccd457d31f Mon Sep 17 00:00:00 2001 From: Andie Hunt Date: Tue, 31 May 2022 22:53:42 -0400 Subject: [PATCH] 5.50.0 release notes: added security release --- release-notes.md | 1 + release-notes/5.50.0.md | 7 ++++++- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/release-notes.md b/release-notes.md index 65bdf3a87e..b0c9f9112b 100644 --- a/release-notes.md +++ b/release-notes.md @@ -20,6 +20,7 @@ Other resources for identifying changes are: Released June 1, 2022 - **[Synopsis](release-notes/5.50.0.md#synopsis)** +- **[Security advisories](release-notes/5.50.0.md#security)** - **[Features](release-notes/5.50.0.md#features)** - **[Bugs resolved](release-notes/5.50.0.md#bugs)** - **[Miscellany](release-notes/5.50.0.md#misc)** diff --git a/release-notes/5.50.0.md b/release-notes/5.50.0.md index 3d097100b6..442531a4f5 100644 --- a/release-notes/5.50.0.md +++ b/release-notes/5.50.0.md @@ -3,6 +3,7 @@ Released June 1, 2022 - **[Synopsis](#synopsis)** +- **[Security advisories](#security)** - **[Features](#features)** - **[Bugs resolved](#bugs)** - **[Miscellany](#misc)** @@ -13,7 +14,7 @@ Released June 1, 2022 | *Does this version...?* | | |:--------------------------------------------------------------- |:-------:| -| Fix security vulnerabilities? | no | +| Fix security vulnerabilities? | **yes** | | **Change the database schema?** | **yes** | | **Alter the API?** | **yes** | | Require attention to configuration options? | no | @@ -21,6 +22,10 @@ Released June 1, 2022 | **Introduce features?** | **yes** | | **Fix bugs?** | **yes** | +## Security advisories + +- **[CIVI-SA-2022-07: APIv3 Access Bypass](https://civicrm.org/advisory/civi-sa-2022-07-apiv3-access-bypass)** + ## Features ### Core CiviCRM -- 2.25.1