summaryrefslogtreecommitdiff
path: root/docs/releases/3.2.17.txt
AgeCommit message (Collapse)Author
2023-02-01Fixed CVE-2023-23969 -- Prevented DoS with pathological values for ↵Nick Pope
Accept-Language. The parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large. Accept-Language headers are now limited to a maximum length in order to avoid this issue.
2023-01-25Adjusted release notes for 4.1.6, 4.0.9, and 3.2.17.Carlton Gibson
2023-01-25Set date and added stub release notes for 4.1.6, 4.0.9, and 3.2.17.Carlton Gibson