diff --git a/python-spotipy.changes b/python-spotipy.changes index 12a6365..d1dcc58 100644 --- a/python-spotipy.changes +++ b/python-spotipy.changes @@ -1,7 +1,7 @@ ------------------------------------------------------------------- Thu Nov 27 07:15:05 UTC 2025 - Daniel Garcia -- Update to 2.25.2: +- Update to 2.25.2 (bsc#1254285): * Security + CVE-2025-66040 – HTML for OAuth flow now sanitized: prevents potential XSS attacks (by @yueyueL) Upgrade if you run spotipy @@ -17,7 +17,7 @@ Thu Nov 27 07:15:05 UTC 2025 - Daniel Garcia ------------------------------------------------------------------- Fri Feb 28 05:07:51 UTC 2025 - Steve Kowalik -- Update to 2.25.1: +- Update to 2.25.1 (bsc#1238059): * Security + CVE-2025-27154 – Cache file permissions tightened: now 600 (user read/write only) instead of 644, preventing unauthorized local access