From 9b066d14c264d73091c2e69277615425ba25b16f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=B6rn=20Friedrich=20Dreyer?= Date: Fri, 26 Apr 2024 11:00:16 +0000 Subject: [PATCH] Automated changelog update [skip ci] --- CHANGELOG.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index fc946352d5..e56e74ca2a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -70,6 +70,7 @@ The following sections list the changes for unreleased. * Bugfix - Update the admin user role assignment to enforce the config: [#8897](https://github.com/owncloud/ocis/pull/8897) * Bugfix - Fix affected users on sses: [#8928](https://github.com/owncloud/ocis/pull/8928) * Bugfix - Fix well-known rewrite endpoint: [#8946](https://github.com/owncloud/ocis/pull/8946) +* Bugfix - Crash when processing crafted TIFF files: [#8981](https://github.com/owncloud/ocis/pull/8981) * Change - Change the default store for presigned keys to nats-js-kv: [#8419](https://github.com/owncloud/ocis/pull/8419) * Change - Disable resharing by default for deprecation: [#8653](https://github.com/owncloud/ocis/pull/8653) * Enhancement - Introduce staticroutes package & remove well-known OIDC middleware: [#6095](https://github.com/owncloud/ocis/issues/6095) @@ -290,6 +291,13 @@ The following sections list the changes for unreleased. https://github.com/owncloud/ocis/issues/8703 https://github.com/owncloud/ocis/pull/8946 +* Bugfix - Crash when processing crafted TIFF files: [#8981](https://github.com/owncloud/ocis/pull/8981) + + Fix for a vulnerability with low severity in disintegration/imaging. + + https://github.com/owncloud/ocis/pull/8981 + https://github.com/advisories/GHSA-q7pp-wcgr-pffx + * Change - Change the default store for presigned keys to nats-js-kv: [#8419](https://github.com/owncloud/ocis/pull/8419) We wrapped the store service in a micro store implementation and changed the