From 1ed04ffa8aeb407560ef5ed77fff0675d0a46b9e Mon Sep 17 00:00:00 2001 From: Min RK Date: Sun, 18 Nov 2018 12:22:37 +0100 Subject: [PATCH] changes for 5.7.1, 5.7.2 --- docs/source/changelog.rst | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/docs/source/changelog.rst b/docs/source/changelog.rst index 0c64f5554..9fb579410 100644 --- a/docs/source/changelog.rst +++ b/docs/source/changelog.rst @@ -21,6 +21,21 @@ We strongly recommend that you upgrade pip to version 9+ of pip before upgrading Use ``pip install pip --upgrade`` to upgrade pip. Check pip version with ``pip --version``. +.. _release-5.7.2: + +5.7.2 +----- + +5.7.2 contains a security fix preventing malicious directory names +from being able to execute javascript. CVE request pending. + +.. _release-5.7.1: + +5.7.1 +----- + +5.7.1 contains a security fix preventing nbconvert endpoints from executing javascript with access to the server API. CVE request pending. + .. _release-5.7.0: 5.7.0