thevar1able/ClickHouse
1
0
Fork 0
mirror of https://github.com/ClickHouse/ClickHouse.git synced 2024-09-21 01:00:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #7526 from ClickHouse/update_security_changelog

Browse Source 
Update security changelog
This commit is contained in:
alexey-milovidov 2019-10-31 00:08:47 +03:00 committed by GitHub
commit 0da5b93c16
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
docs/en/security_changelog.md
View File

@ -1,3 +1,10 @@
## Fixed in ClickHouse Release 19.13.6.1, 2019-09-20
### CVE-2019-
Table function `url` had the vulnerability allowed the attacker to inject arbitrary HTTP headers in the request.
Credits: [Nikita Tikhomirov](https://github.com/NSTikhomirov)
## Fixed in ClickHouse Release 18.12.13, 2018-09-10
### CVE-2018-14672

7
docs/ru/security_changelog.md
View File

@ -1,3 +1,10 @@
## Исправлено в релизе 19.13.6.1 от 20 сентября 2019
### CVE-2019-
Уязвимость в табличной функции `url` позволяла злоумышленнику добавлять произвольные HTTP-заголовки в запрос.
Обнаружено благодаря: [Никите Тихомирову](https://github.com/NSTikhomirov)
## Исправлено в релизе 18.12.13 от 10 сентября 2018
### CVE-2018-14672