Skip to content

Commit 40a33d1

Browse files
committed
Automated changelog update [skip ci]
1 parent 291d80a commit 40a33d1

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

CHANGELOG.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -35,12 +35,20 @@ ownCloud admins and users.
3535

3636
## Summary
3737

38+
* Bugfix - Apply SVG sanitization to all file content before using ImageMagick: [#41433](https://github.com/owncloud/core/pull/41433)
3839
* Bugfix - Disallow empty tokens when pairing trusted servers: [#41434](https://github.com/owncloud/core/pull/41434)
3940
* Change - Update PHP dependencies: [#41408](https://github.com/owncloud/core/pull/41408)
4041
* Enhancement - Add mimetype aliases/mapping for .toml and .ovpn: [#41431](https://github.com/owncloud/core/pull/41431)
4142

4243
## Details
4344

45+
* Bugfix - Apply SVG sanitization to all file content before using ImageMagick: [#41433](https://github.com/owncloud/core/pull/41433)
46+
47+
Any file content is now sanitized for SVG threats before being processed by
48+
ImageMagick, preventing potential security vulnerabilities.
49+
50+
https://github.com/owncloud/core/pull/41433
51+
4452
* Bugfix - Disallow empty tokens when pairing trusted servers: [#41434](https://github.com/owncloud/core/pull/41434)
4553

4654
An empty token could be used to pair trusted servers, which is not secure.

0 commit comments

Comments
 (0)