Skip to content

v6.0.5

Pre-release
Pre-release

Choose a tag to compare

@dev-embedthis dev-embedthis released this 26 Sep 01:18
· 187 commits to main since this release

Minor Patch Release

This release incorporates the result of an extensive security audit using static tools, fuzzing and AI supported scanning.

While no security issues with relevant risk were discovered, the update tightens the code in many places.

Recommended Action

  • Optional Upgrade -- Upgrade only if convenient
  • Recommended Upgrade -- Upgrade recommended but not essential
  • Essential Upgrade -- All users strongly advised to upgrade

Features

  • Extensive documentation updates.

Fixes

  • Harden NULL tolerance
  • Extend integer overflow protection
  • Replace string APIs with mpr alternatives and safe string APIs
  • Update openssl configuration
  • Improve URL character validation
  • Cleanup some debug log trace

See