Skip to content

libhttpserver 2.0.1

Latest

Choose a tag to compare

@github-actions github-actions released this 09 Oct 23:06
ff85cba

Security release fixing GHSA-q8g6-h8wv-pr43, an unauthenticated denial of service caused by unnamed multipart file uploads. Upgrade from 2.0.0 to 2.0.1.

  • Fixed CI lint annotations for libcurl-required long types in the
    raw multipart upload regression helper.
  • Fixed an unauthenticated server crash when a multipart file part omits
    the name attribute. Unnamed file parts are ignored before memory
    or disk upload handling. Thanks to Allen Yen (@tntrock) for the private report.
  • Corrected the documentation include path and graph font configuration.
  • Fixed release-note extraction on macOS and made the ABI packaging gate
    use the configured patch version while retaining SONAME 2.