From ee3cb8e8e69828faa865c145b32f5bb94259a62c Mon Sep 17 00:00:00 2001 From: Guillaume Ayoub Date: Wed, 19 Apr 2017 14:04:09 +0200 Subject: [PATCH] Version 1.1.2 --- NEWS.rst | 8 ++++++++ radicale/__init__.py | 2 +- 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/NEWS.rst b/NEWS.rst index 34ab8a63..4ab38c49 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -3,6 +3,14 @@ ====== +1.1.2 - Third Law of Nature +=========================== + +* **Security fix**: Add a random timer to avoid timing oracles and simple + bruteforce attacks when using the htpasswd authentication method. +* Various minor fixes. + + 1.1.1 - Second Law of Nature ============================ diff --git a/radicale/__init__.py b/radicale/__init__.py index 17aca24c..40c64a0b 100644 --- a/radicale/__init__.py +++ b/radicale/__init__.py @@ -50,7 +50,7 @@ except ImportError: from . import auth, config, ical, log, pathutils, rights, storage, xmlutils -VERSION = "1.1.1" +VERSION = "1.1.2" # Standard "not allowed" response that is returned when an authenticated user # tries to access information they don't have rights to