From 16d86dbaa94023fa02596576314a2f70bd88dbb8 Mon Sep 17 00:00:00 2001 From: Lain Soykaf Date: Sat, 24 Oct 2026 09:38:16 +0400 Subject: [PATCH] Changelog: add plug_crypto 2.2.1 to 2.11.0 --- CHANGELOG.md | 1 + changelog.d/plug_crypto-2.2.1.security | 1 - 2 files changed, 1 insertion(+), 1 deletion(-) delete mode 100644 changelog.d/plug_crypto-2.2.1.security diff --git a/CHANGELOG.md b/CHANGELOG.md index 6ebfbc10e..cfbb31639 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -14,6 +14,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). - Update bandit to version 1.13.1 resolving a stuck process and unvalidated HTTP/1 headers vulnerabilities - Updated CAStore to version 1.0.22 with updated Mozilla certificate bundle after eMudhra Intermediate CA Compromise - Update certifi to version 2.18.0, which removes the distrusted emSign roots +- Update plug_crypto to version 2.2.1, so a malformed shout socket token no longer writes the secret key base to the error log - Update Cowboy to address multipart header parsing denial-of-service vulnerabilities. - Update cowboy to version 2.19.0 which fixes a memory exhaustion DoS - Update Cowlib to address HTTP parsing resource exhaustion and injection vulnerabilities. diff --git a/changelog.d/plug_crypto-2.2.1.security b/changelog.d/plug_crypto-2.2.1.security deleted file mode 100644 index 46dcf2002..000000000 --- a/changelog.d/plug_crypto-2.2.1.security +++ /dev/null @@ -1 +0,0 @@ -Update plug_crypto to version 2.2.1, so a malformed shout socket token no longer writes the secret key base to the error log