We just released diaspora* version 0.5.10.2 which fixes CVE-2016-6316 and CVE-2016-6317.

Updating

Please update as soon as possible. Update instructions are available as usual in the wiki.