|author||Evgeny Grin (Karlson2k) <firstname.lastname@example.org>||2023-02-28 12:58:42 +0300|
|committer||Evgeny Grin (Karlson2k) <email@example.com>||2023-02-28 21:31:00 +0300|
Updated NEWS for v0.9.76
1 files changed, 14 insertions, 0 deletions
@@ -1,3 +1,17 @@
+Sun 26 Feb 2023 17:49:30 CET
+Released GNU libmicrohttpd 0.9.76 hotfix. -CG
+ This is a hotfix release.
+ Fixed potential DoS vector in MHD_PostProcessor discovered by Gynvael
+ Coldwind and Dejan Alvadzijevic.
+ While the researchers have not been able to exploit this attack vector
+ when libmicrohttpd is compiled with the standard GNU C library, it is
+ recommended that you update MHD as soon as possible if PostProcessor
+ functionality is used in your applications.
+ Otherwise, you can skip this release.
+ -- Evgeny Grin (Karlson2k)
Sun 26 Dec 2021 20:30:00 MSK
Released GNU libmicrohttpd 0.9.75 -EG