hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Mergeback release 2.5.4

Browse source
This commit is contained in:
Haelwenn (lanodan) Monnier 2023-08-05 08:27:42 +02:00
commit 4099ddb3dc
3 changed files with 7 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
changelog.d/akkoma-xml-remote-entities.security
View file

@ -1 +1 @@
Restrict XML parser from processing external entitites (XXE)
Fix XML External Entity (XXE) loading vulnerability allowing to fetch arbitary files from the server's filesystem