- Fix handling of expanding HTTP header values (bsc#1219960, CVE-2024-25617)

OBS-URL: https://build.opensuse.org/package/show/server:proxy/squid?expand=0&rev=293
This commit is contained in:
2024-03-06 13:03:42 +00:00
committed by Git OBS Bridge
parent 8ef00f7fd9
commit 17b414d940

View File

@@ -43,7 +43,7 @@ Thu Dec 28 22:12:14 UTC 2023 - Sean Lewis <seanlew@opensuse.org>
- changes in 6.5:
- Bug 5309: frequent "lowestOffset () <= target_offset" assertion
- Bug 4977: Remove mem_hdr::freeDataUpto() assertion
- Fix handling of expanding HTTP header values
- Fix handling of expanding HTTP header values (bsc#1219960, CVE-2024-25617)
- Fix RFC 1123 date parsing (bsc#1217813, CVE-2023-49285)
- Gracefully shutdown when helper process startup fails (bsc#1217815, CVE-2023-49286)