Accepting request 638408 from home:KGronlund:branches:server:http

* BUG/MEDIUM: cache: don't cache when an Authorization header is present (VUL-1) (bsc#1094846) (CVE-2018-11469)

OBS-URL: https://build.opensuse.org/request/show/638408
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=177
This commit is contained in:
Kristoffer Gronlund 2018-09-26 14:03:33 +00:00 committed by Git OBS Bridge
parent 1a550b1bb7
commit 3696cb6079

View File

@ -158,7 +158,7 @@ Mon Jun 25 05:16:57 UTC 2018 - kgronlund@suse.com
Tue May 29 07:09:26 UTC 2018 - kgronlund@suse.com
- Update to version 1.8.9~git9.6d82e611:
* BUG/MEDIUM: cache: don't cache when an Authorization header is present (VUL-1) (bsc#1094846)
* BUG/MEDIUM: cache: don't cache when an Authorization header is present (VUL-1) (bsc#1094846) (CVE-2018-11469)
* BUG/MEDIUM: dns: Delay the attempt to run a DNS resolution on check failure.
* BUG/MINOR: ssl/lua: prevent lua from affecting automatic maxconn computation
* BUG/MEDIUM: contrib/modsecurity: Use network order to encode/decode flags