Updated ChangeLog and NEWS for v0.9.76

This commit is contained in:
Evgeny Grin (Karlson2k)
2023-03-01 17:27:35 +03:00
parent 50ce5a6ba0
commit 32311bfe06
2 changed files with 15 additions and 1 deletions
+1 -1
View File
@@ -1,6 +1,6 @@
Sun Feb 26 05:49:30 PM CET 2023
Fix potential DoS vector in MHD_PostProcessor discovered
by Gynvael Coldwind and Dejan Alvadzijevic. -CG
by Gynvael Coldwind and Dejan Alvadzijevic (CVE-2023-27371). -CG
Releasing GNU libmicrohttpd 0.9.76 hotfix. -CG
Sun 26 Dec 2021 20:30:00 MSK
+14
View File
@@ -1,3 +1,17 @@
Sun 26 Feb 2023 17:49:30 CET
Released GNU libmicrohttpd 0.9.76 hotfix. -CG
This is a hotfix release.
This only change since previous release is fixed potential DoS vector
in MHD_PostProcessor discovered by Gynvael Coldwind and Dejan
Alvadzijevic (CVE-2023-27371).
While the researchers have not been able to exploit this attack vector
when libmicrohttpd is compiled with the standard GNU C library, it is
recommended that you update MHD as soon as possible if your
applications are using (optional) MHD_PostProcessor functionality.
-- Evgeny Grin (Karlson2k)
Sun 26 Dec 2021 20:30:00 MSK
Released GNU libmicrohttpd 0.9.75 -EG