From cc70271fab08aeee29a1899b122d44e7eb198dee49f71187bd1599d007a15e28 Mon Sep 17 00:00:00 2001 From: Marcus Meissner Date: Tue, 9 May 2023 15:13:41 +0000 Subject: [PATCH] Accepting request 1085762 from home:msmeissn:branches:security Security fixes: - CVE-2023-30551: Fixed a potential denial of service (out of memory) when processing JAR META-INF files or .SIGN/.PKINFO files in APK files. (bsc#1211210 https://github.com/advisories/GHSA-2h5h-59f5-c5x9) OBS-URL: https://build.opensuse.org/request/show/1085762 OBS-URL: https://build.opensuse.org/package/show/security/rekor?expand=0&rev=31 --- rekor.changes | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/rekor.changes b/rekor.changes index 45c2278..b538403 100644 --- a/rekor.changes +++ b/rekor.changes @@ -15,6 +15,12 @@ Wed May 3 12:23:27 UTC 2023 - Marcus Meissner - swap cjson dependency (#1441) - Update release readme (#1456) + Security fixes: + + - CVE-2023-30551: Fixed a potential denial of service (out of memory) + when processing JAR META-INF files or .SIGN/.PKINFO files in APK files. + (bsc#1211210 https://github.com/advisories/GHSA-2h5h-59f5-c5x9) + ------------------------------------------------------------------- Wed Apr 5 08:27:23 UTC 2023 - Marcus Meissner