Overview

Request 1072447 accepted

- Update to version 2.10.21
Bugfixes
========
Frontend:
* Update rack to version 2.2.6.4
- Fixes CVE-2023-27539 Avoid ReDoS (https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS) in header parsing.
- Fixes CVE-2023-27530 Possible DoS Vulnerability in Multipart MIME parsing.+

Loading...
Request History
Daniel Donisa's avatar

danidoni created request

- Update to version 2.10.21
Bugfixes
========
Frontend:
* Update rack to version 2.2.6.4
- Fixes CVE-2023-27539 Avoid ReDoS (https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS) in header parsing.
- Fixes CVE-2023-27530 Possible DoS Vulnerability in Multipart MIME parsing.+


Hendrik Vogelsang's avatar

hennevogel accepted request

LGTM

openSUSE Build Service is sponsored by