summaryrefslogtreecommitdiff
path: root/changelog.d/akkoma-xml-remote-entities.security
diff options
context:
space:
mode:
authorLain Soykaf <lain@lain.com>2023-11-12 13:53:18 +0400
committerLain Soykaf <lain@lain.com>2023-11-12 13:53:18 +0400
commit0c5cc519833166e1c748deb81394af9940c05928 (patch)
tree4eb13f297395d738df1054c82a744b3ae99479e0 /changelog.d/akkoma-xml-remote-entities.security
parent398141da68328cea982f017a3e8bc95a9f9c1fbf (diff)
parenta51f3937eef0c6add91234863d5f936c59830d88 (diff)
downloadpleroma-0c5cc519833166e1c748deb81394af9940c05928.tar.gz
pleroma-0c5cc519833166e1c748deb81394af9940c05928.zip
Merge branch 'develop' of git.pleroma.social:pleroma/pleroma into pleroma-meilisearch
Diffstat (limited to 'changelog.d/akkoma-xml-remote-entities.security')
-rw-r--r--changelog.d/akkoma-xml-remote-entities.security1
1 files changed, 1 insertions, 0 deletions
diff --git a/changelog.d/akkoma-xml-remote-entities.security b/changelog.d/akkoma-xml-remote-entities.security
new file mode 100644
index 000000000..5e6725e5b
--- /dev/null
+++ b/changelog.d/akkoma-xml-remote-entities.security
@@ -0,0 +1 @@
+Fix XML External Entity (XXE) loading vulnerability allowing to fetch arbitary files from the server's filesystem