SHA256
1
0
forked from pool/rekor

Accepting request 1085763 from security

Security fixes:
  - CVE-2023-30551: Fixed a potential denial of service (out of memory)
    when processing JAR META-INF files or .SIGN/.PKINFO files in APK files.
    (bsc#1211210 https://github.com/advisories/GHSA-2h5h-59f5-c5x9) (forwarded request 1085762 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/1085763
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rekor?expand=0&rev=16
This commit is contained in:
Dominique Leuenberger 2023-05-10 14:17:15 +00:00 committed by Git OBS Bridge
commit 008e52fdf6

View File

@ -15,6 +15,12 @@ Wed May 3 12:23:27 UTC 2023 - Marcus Meissner <meissner@suse.com>
- swap cjson dependency (#1441)
- Update release readme (#1456)
Security fixes:
- CVE-2023-30551: Fixed a potential denial of service (out of memory)
when processing JAR META-INF files or .SIGN/.PKINFO files in APK files.
(bsc#1211210 https://github.com/advisories/GHSA-2h5h-59f5-c5x9)
-------------------------------------------------------------------
Wed Apr 5 08:27:23 UTC 2023 - Marcus Meissner <meissner@suse.com>