Steve Kowalik 2022-09-02 05:08:55 +00:00 committed by Git OBS Bridge
parent 3ea01e31b6
commit d58978abbd

View File

@ -1,8 +1,9 @@
-------------------------------------------------------------------
Thu Sep 1 04:20:04 UTC 2022 - Steve Kowalik <steven.kowalik@suse.com>
- http.server: Fix an open redirection vulnerability in the HTTP server
when an URI path starts with //. (bsc#1202624, CVE-2021-28861)
- Add patch CVE-2021-28861-double-slash-path.patch:
* http.server: Fix an open redirection vulnerability in the HTTP server
when an URI path starts with //. (bsc#1202624, CVE-2021-28861)
-------------------------------------------------------------------
Wed Aug 31 08:47:57 UTC 2022 - Matej Cepl <mcepl@suse.com>