Release v0.6.6

ericmj · ericmj · commit 5b7e2e67d18c · 2020-02-03T16:56:51.000+01:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,10 @@
 # CHANGELOG
 
+## 0.6.6 (2020-02-03)
+
+* Do not crash on empty tarballs
+* Fix directory traversal vulnerability for symlinks in tarballs
+
 ## 0.6.5 (2020-01-14)
 
 * Transition away from `http_uri` when using newer OTP releases
diff --git a/doc/tpl.html b/doc/tpl.html
@@ -20,7 +20,7 @@ <h1 style="margin-top: 0;margin-bottom: 0;text-align:center;">
             <span style="color: #3d3d3d;font-weight: 300;font-size: 20px;">hex_core</span>
           </h1>
           <h2 style="margin-top: 0;margin-bottom: 0;text-align:center;">
-            <span style="color: #3d3d3d;font-weight: 300;font-size: 18px;">v0.6.5</span>
+            <span style="color: #3d3d3d;font-weight: 300;font-size: 18px;">v0.6.6</span>
           </h2>
         </div>
 
diff --git a/src/hex_core.app.src b/src/hex_core.app.src
@@ -1,6 +1,6 @@
 {application, hex_core, [
   {description, "Reference implementation of Hex specifications"},
-  {vsn, "0.6.5"},
+  {vsn, "0.6.6"},
   {registered, []},
   {applications, [kernel, stdlib]},
   {licenses, ["Apache-2.0"]},
diff --git a/src/hex_core.hrl b/src/hex_core.hrl
@@ -1 +1 @@
--define(HEX_CORE_VERSION, "0.6.5").
+-define(HEX_CORE_VERSION, "0.6.6").
