From 8297da8aa071b3bf1584738229f277833bd20c49 Mon Sep 17 00:00:00 2001 From: Helio Cola Date: Thu, 2 Nov 2023 00:13:56 -0400 Subject: [PATCH] 4.3.3 release --- CHANGELOG | 6 ++++++ lib/redcloth/version.rb | 2 +- tasks/release.rake | 15 +++++++-------- 3 files changed, 14 insertions(+), 9 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index ac43f65b..95f1768b 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,3 +1,9 @@ +== 4.3.3 / Nov 2nd, 2023 + +* Add tests for CVE-2023-31606 [Helio Cola] +* Fix rake compile [Helio Cola and Faria Education Group] +* Fix CVE-2023-31606 (ReDOS possible in the sanitize_html function) [Kornelius Kalnbach and Merbin Russel] + == 4.3.2 / May 23rd, 2016 * Fix additional case for CVE-2012-6684 [Joshua Siler] diff --git a/lib/redcloth/version.rb b/lib/redcloth/version.rb index 617f87ce..3ec630a5 100644 --- a/lib/redcloth/version.rb +++ b/lib/redcloth/version.rb @@ -2,7 +2,7 @@ module RedCloth module VERSION MAJOR = 4 MINOR = 3 - TINY = 2 + TINY = 3 # RELEASE_CANDIDATE = 0 STRING = [MAJOR, MINOR, TINY].compact.join('.') diff --git a/tasks/release.rake b/tasks/release.rake index d9cc0f05..c9c8e139 100644 --- a/tasks/release.rake +++ b/tasks/release.rake @@ -1,16 +1,15 @@ namespace :release do desc 'Push all gems to rubygems.org' - # git tag and push tag - # git tag vx.x.x - # git push --follow-tags - # branch into stable vx.x branch - # change version in version.rb - # update changelog - # run rake test + # 1. run rake test + # 2. update changelog + # 3. change version in version.rb + # 4. branch into stable vx.x branch + # 5. git tag and push tag + # 5.1. git tag vx.x.x + # 5.2. git push --follow-tags task :gem do sh("gem build redcloth.gemspec") sh("gem push RedCloth-*.gem") end end -