From 32311bfe06b25edaaa9aa844f14c455bd5fbc108 Mon Sep 17 00:00:00 2001 From: "Evgeny Grin (Karlson2k)" Date: Tue, 28 Feb 2023 12:58:42 +0300 Subject: [PATCH] Updated ChangeLog and NEWS for v0.9.76 --- ChangeLog | 2 +- NEWS | 14 ++++++++++++++ 2 files changed, 15 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 877f0e33..ec2801b7 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,6 +1,6 @@ Sun Feb 26 05:49:30 PM CET 2023 Fix potential DoS vector in MHD_PostProcessor discovered - by Gynvael Coldwind and Dejan Alvadzijevic. -CG + by Gynvael Coldwind and Dejan Alvadzijevic (CVE-2023-27371). -CG Releasing GNU libmicrohttpd 0.9.76 hotfix. -CG Sun 26 Dec 2021 20:30:00 MSK diff --git a/NEWS b/NEWS index d59aa0b3..c7f49480 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,17 @@ +Sun 26 Feb 2023 17:49:30 CET +Released GNU libmicrohttpd 0.9.76 hotfix. -CG + + This is a hotfix release. + This only change since previous release is fixed potential DoS vector + in MHD_PostProcessor discovered by Gynvael Coldwind and Dejan + Alvadzijevic (CVE-2023-27371). + While the researchers have not been able to exploit this attack vector + when libmicrohttpd is compiled with the standard GNU C library, it is + recommended that you update MHD as soon as possible if your + applications are using (optional) MHD_PostProcessor functionality. + + -- Evgeny Grin (Karlson2k) + Sun 26 Dec 2021 20:30:00 MSK Released GNU libmicrohttpd 0.9.75 -EG