Release version 2.7.5

Icinga · Jul 12, 2021 · 1899627 · 1899627
1 parent 1dfb5f3
commit 1899627
Show file tree

Hide file tree

Showing 9 changed files with 23 additions and 8 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,21 @@ Please make sure to always read our [Upgrading](doc/80-Upgrading.md) documentati
 
 ## What's New
 
+### What's New in Version 2.7.5
+
+**Notice**: This is a security release. It is recommended to upgrade to this release if you don't plan to upgrade to v2.9.0.
+
+You can find all fixes related to this release on our [Project](https://github.com/Icinga/icingaweb2/projects/7).
+
+#### Security Fixes
+
+This release includes two security related fixes. Both were published as part of a security advisory on Github.
+They allow the circumvention of custom variable protection rules and blacklists as well as a path traversal if
+the `doc` module is enabled. Please check the respective advisory for details.
+
+* Custom variable protection and blacklists can be circumvented [GHSA-2xv9-886q-p7xx](https://github.com/Icinga/icingaweb2/security/advisories/GHSA-2xv9-886q-p7xx)
+* Possible path traversal by use of the `doc` module [GHSA-cmgc-h4cx-3v43](https://github.com/Icinga/icingaweb2/security/advisories/GHSA-cmgc-h4cx-3v43)
+
 ### What's New in Version 2.7.4
 
 **Notice**: This is a security release. It is recommended to immediately upgrade to this release.

diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-v2.7.4
+v2.7.5
diff --git a/library/Icinga/Application/Version.php b/library/Icinga/Application/Version.php
@@ -8,7 +8,7 @@
  */
 class Version
 {
-    const VERSION = '2.7.4';
+    const VERSION = '2.7.5';
 
     /**
      * Get the version of this instance of Icinga Web 2

diff --git a/modules/doc/module.info b/modules/doc/module.info
@@ -1,4 +1,4 @@
 Module: doc
-Version: 2.7.4
+Version: 2.7.5
 Description: Documentation module
  Extracts, shows and exports documentation for Icinga Web 2 and its modules.
diff --git a/modules/migrate/module.info b/modules/migrate/module.info
@@ -1,5 +1,5 @@
 Module: migrate
-Version: 2.7.4
+Version: 2.7.5
 Description: Migrate module
  This module was introduced with the domain-aware authentication feature in version 2.5.0.
  It helps you migrating users and user configurations according to a given domain.
diff --git a/modules/monitoring/module.info b/modules/monitoring/module.info
@@ -1,5 +1,5 @@
 Module: monitoring
-Version: 2.7.4
+Version: 2.7.5
 Description: Icinga monitoring module
  This is the core module for most Icingaweb users. It provides an
  abstraction layer for various Icinga data backends.
diff --git a/modules/setup/module.info b/modules/setup/module.info
@@ -1,5 +1,5 @@
 Module: setup
-Version: 2.7.4
+Version: 2.7.5
 Description: Setup module
  Web based wizard for setting up Icinga Web 2 and its modules.
  This includes the data backends (e.g. relational database, LDAP),

diff --git a/modules/test/module.info b/modules/test/module.info
@@ -1,5 +1,5 @@
 Module: test
-Version: 2.7.4
+Version: 2.7.5
 Description: Translation module
  This module allows developers to run (unit) tests against Icinga Web 2 and
  any of its modules. Usually you do not need to enable this.
diff --git a/modules/translation/module.info b/modules/translation/module.info
@@ -1,5 +1,5 @@
 Module: translation
-Version: 2.7.4
+Version: 2.7.5
 Description: Translation module
  This module allows developers and translators to translate Icinga Web 2 and
  its modules for multiple languages. You do not need this module to run an