summaryrefslogtreecommitdiff
path: root/CHANGES
diff options
context:
space:
mode:
authorFlorian Frank <flori@ping.de>2013-02-04 23:28:30 +0100
committerFlorian Frank <flori@ping.de>2013-02-10 18:21:37 +0100
commit79fa7f352bae842017c885101a556875600fb468 (patch)
treecec7e7246b943f3a9eff92a1a54ff8e7088035c5 /CHANGES
parent3dab4c5a6a97fac03dacf19446b9ff2a6b397591 (diff)
downloadjson-fix-additions-problem-v1.5.5.tar.gz
Security fix create_additons problem 1.5.5v1.5.5fix-additions-problem-v1.5.5
Diffstat (limited to 'CHANGES')
-rw-r--r--CHANGES7
1 files changed, 7 insertions, 0 deletions
diff --git a/CHANGES b/CHANGES
index 8e751be..42328b7 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,10 @@
+2013-02-04 (1.5.5)
+ * Security fix for JSON create_additions default value. It should not be
+ possible to create additions unless
+ explicitely requested by setting the create_additions argument to true or
+ using the JSON.load/dump interface.
+ * Backport change that corrects Time serialisation/deserialisation on some
+ platforms.
2011-08-31 (1.5.4)
* Fix memory leak when used from multiple JRuby. (Patch by
jfirebaugh@github).