From 56541c7c37d0de3f4c7eaafc19118ad837bbbc3d Mon Sep 17 00:00:00 2001 From: Shivani Bhardwaj Date: Fri, 28 Jun 2024 13:03:43 +0530 Subject: [PATCH] changelog: update 6.0.20 CVEs and titles --- ChangeLog | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index 078167c12d..a01357f514 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,7 +1,7 @@ 6.0.20 -- 2024-06-26 -Security #7041: defrag: id reuse can lead to invalid reassembly (6.0.x backport)(CVE 2024-37151) -Security #7112: http2: oom from duplicate headers (6.0.x backport) +Security #7112: http2: oom from duplicate headers (6.0.x backport)(MODERATE - CVE 2024-38535) +Security #7041: defrag: id reuse can lead to invalid reassembly (6.0.x backport)(CRITICAL - CVE 2024-37151) Bug #7014: rust: build with rust 1.78 with slice::from_raw_parts now requiring the pointer to be non-null (6.0.x backport) Bug #7007: rust: fails to build for msrv Bug #5578: rules: stateful drop on dsize sig with app proto set -- 2.47.2