AWS wickr high security documentation change
Summary
Added v6.60.05.78 release notes with authorization validation fix and updated existing bug headers
Security assessment
Explicitly documents fix for privilege escalation vulnerability ('unauthorized privilege escalation') in bot admin commands. This addresses a security weakness through enhanced authorization validation.
Diff
diff --git a/wickr/latest/wickrio/release-notes.md b/wickr/latest/wickrio/release-notes.md index ae996ede2..3f5ae9969 100644 --- a//wickr/latest/wickrio/release-notes.md +++ b//wickr/latest/wickrio/release-notes.md @@ -5 +5 @@ -Version 6.60 - Release Date: 12/08/2025Critical ChangesInfrastructure ImprovementsVersion 6.48 - Release Date: 04/14/2025Version 6.36.20.02 - HotfixVersion 6.36.13.01Version 6.34.05.01Version 6.32.04.02Version 6.24.06.02Version 6.18.19.02Version 6.16.19.01Version 6.11.05.01Version 5.116.19.02Version 5.116.18.01Version 5.116.13.01 +Version 6.60.05.78 - Release Date: 01/20/2026Version 6.60 - Release Date: 12/08/2025Critical ChangesInfrastructure ImprovementsVersion 6.48 - Release Date: 04/14/2025Version 6.36.20.02 - HotfixVersion 6.36.13.01Version 6.34.05.01Version 6.32.04.02Version 6.24.06.02Version 6.18.19.02Version 6.16.19.01Version 6.11.05.01Version 5.116.19.02Version 5.116.18.01Version 5.116.13.01 @@ -12,0 +13,8 @@ AWS Wickr bots and integrations are regularly updated with new features, improve +## Version 6.60.05.78 - Release Date: 01/20/2026 + +The 6.60.05.78 release is a bug fix release and focused on the following major changes: + +### Bug Fix: Enhanced authorization validation in bot's admin command handling + +Admin command handling was found to have limited authorization validation. Changes were made to prevent unauthorized privilege escalation. + @@ -133 +141 @@ The 6.36.20.02 hotfix release of the bot-enterprise image and the 6.36.09.01 hot -### Fix Bug: The Edit message, delete message and reactions are not being captured +### Bug Fix: The Edit message, delete message and reactions are not being captured @@ -160 +168 @@ Using the clientConfig.json file to automate the start of bots does not generate -### Fix Bug: Sending messages to invalid users could hang bot +### Bug Fix: Sending messages to invalid users could hang bot