From 33367422a5bbcd31cfe58aec48f0f7bcebd0622b Mon Sep 17 00:00:00 2001 From: Kevin Chung Date: Mon, 8 Apr 2019 07:57:40 -0400 Subject: [PATCH] Mark 2.0.6 (#946) 2.0.6 / 2019-04-08 ================== **Security** * Fixes an issue where user email addresses could be disclosed to non-admins **General** * Users/Teams set to hidden or banned are no longer visible by other users * This affects the API and the main user interface. This does not affect admins. * Users without Teams can no longer view challenges when the CTF is in Team Mode --- CHANGELOG.md | 11 +++++++++++ CTFd/__init__.py | 2 +- 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 22f00c88..4bd3fb3c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,14 @@ +2.0.6 / 2019-04-08 +================== + +**Security** +* Fixes an issue where user email addresses could be disclosed to non-admins + +**General** +* Users/Teams set to hidden or banned are no longer visible by other users + * This affects the API and the main user interface. This does not affect admins +* Users without a Team can no longer view challenges when the CTF is in Team Mode + 2.0.5 / 2019-03-23 ================== diff --git a/CTFd/__init__.py b/CTFd/__init__.py index ac1df062..581b69ec 100644 --- a/CTFd/__init__.py +++ b/CTFd/__init__.py @@ -22,7 +22,7 @@ if sys.version_info[0] < 3: reload(sys) sys.setdefaultencoding("utf-8") -__version__ = '2.0.5' +__version__ = '2.0.6' class CTFdRequest(Request):