From 0194cbdf6992ab5eaaea973c596c1efa4e33193f Mon Sep 17 00:00:00 2001 From: comrumino Date: Fri, 23 Feb 2024 17:30:15 -0600 Subject: [PATCH] Updated CHANGELOG.rst for major release 6 --- CHANGELOG.rst | 8 ++++++++ rpyc/version.py | 4 ++-- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.rst b/CHANGELOG.rst index 0b565500..10e82656 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -1,3 +1,11 @@ +6.0.0 +===== +Date: 2024-02-23 + +- `#551`_ Resolves security issue that results in RCE. The fix breaks backwards compatibility for those that rely on the `__array__` attribute used by `numpy`. This RCE is only exploitable when the server-side gets the attribute `__array__` and calls it (e.g., `np.array(x)`). This issues effects all versions since major release 4. + +.. _#551: https://github.com/tomerfiliba-org/rpyc/issues/551 + 5.3.1 ===== Date: 2023-02-21 diff --git a/rpyc/version.py b/rpyc/version.py index b8b27deb..d8049802 100644 --- a/rpyc/version.py +++ b/rpyc/version.py @@ -1,3 +1,3 @@ -__version__ = '5.3.1' +__version__ = '6.0.0' version = tuple(__version__.split('.')) -release_date = "2023-02-21" +release_date = "2024-02-23"