Merge pull request #15 from freedomofpress/0-14-1-changelog

SecureDrop Client 0.14.1
freedomofpress · Jan 30, 2025 · 7ded107 · 7ded107
2 parents e1c6e75 + b3ced68
commit 7ded107
Show file tree

Hide file tree

Showing 4 changed files with 19 additions and 2 deletions.
diff --git a/changelog.md b/changelog.md
@@ -1,5 +1,16 @@
 # Changelog
 
+## 0.14.1
+
+This release contains fixes for two security issues; please see our advisory for more details.
+
+* Security fixes:
+  * Prevent path manipulation/traversal attacks in SDK
+  * Don't send source VM name to sd-log
+
+* Miscellaneous:
+  * Update year in messages.pot
+
 ## 0.14.0
 
 * Add support for selecting and deleting multiple sources (#2208, #2188, #2230, #2252, #2293, #2299, #2300)

diff --git a/client/securedrop_client/__init__.py b/client/securedrop_client/__init__.py
@@ -1 +1 @@
-__version__ = "0.14.0"
+__version__ = "0.14.1"
diff --git a/debian/changelog b/debian/changelog
@@ -1,3 +1,9 @@
+securedrop-client (0.14.1) unstable; urgency=medium
+
+  * see changelog.md
+
+ -- SecureDrop Team <securedrop@freedom.press>  Thu, 30 Jan 2025 13:17:30 -0500
+
 securedrop-client (0.14.0) unstable; urgency=medium
 
   * see changelog.md

diff --git a/export/securedrop_export/__init__.py b/export/securedrop_export/__init__.py
@@ -1 +1 @@
-__version__ = "0.14.0"
+__version__ = "0.14.1"