From: rinpatch <rinpatch@sdf.org>
Date: Fri, 12 Jun 2020 18:09:40 +0000 (+0300)
Subject: CHANGELOG.md: add 2.0.7 entry
X-Git-Url: https://git.squeep.com/?a=commitdiff_plain;h=ffd12d3a1e8305aaba66cdbf015e5fbc32bc88bc;p=akkoma

CHANGELOG.md: add 2.0.7 entry
---

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f5b75639d..b3f51fcb1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,20 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
+## [2.0.7] - 2020-06-13
+
+### Security
+- Fix potential DoSes exploiting atom leaks in rich media parser/`UserAllowListPolicy` MRF policy
+
+### Fixed
+- CSP: not allowing images/media from every host when mediaproxy is disabled
+- CSP: not adding mediaproxy base url to image/media hosts
+- StaticFE missing the CSS file
+
+### Upgrade notes
+
+1. Restart Pleroma
+
 ## [2.0.6] - 2020-06-09
 
 ### Security