From 06b68f2572797baf63fa400b738207b353545977 Mon Sep 17 00:00:00 2001 From: deeplow Date: Wed, 6 Dec 2023 11:18:43 +0000 Subject: [PATCH] Update CHANGELOG for v0.5.1 release --- CHANGELOG.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index d22a482..b94b95a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,18 @@ since 0.4.1, and this project adheres to [Semantic Versioning](https://semver.or ## Unreleased +## Dangerzone 0.5.1 + +### Changed + +- Use more descriptive button labels in update check prompt ([issue #527](https://github.com/freedomofpress/dangerzone/issues/527), thanks to [@garrettr](https://github.com/garrettr)) + +### Security + +- Protect our container image against CVE-2023-43115, by updating GhostScript to version 10.02.0. Note that this CVE affects the **untrusted** environment where the conversion of the document to pixels takes place. Dangerzone operates under the assumption that this environment will eventually get exploited, which is why it protects the users in depth by running this environment in a hardened container, as a defense in depth measure. We are not aware of any container escape that impacts our users' security, but it's highly recommended to update to the latest Dangerzone version. + +- Security advisory 2023-10-25: prevent dz-dvm network via dispVMs. This was officially communicated on the advisory date and is only included here since this is the first release since it was announced. + ## Dangerzone 0.5.0 ### Added