diff options
-rw-r--r-- | CHANGELOG.md | 4 | ||||
-rw-r--r-- | lib/rack/version.rb | 2 |
2 files changed, 5 insertions, 1 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index b81a68d5..85cb1fc2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,10 @@ All notable changes to this project will be documented in this file. For info on how to format all future additions to this file please reference [Keep A Changelog](https://keepachangelog.com/en/1.0.0/). +## [2.2.6.4] - 2023-03-13 + +- [CVE-2023-27539] Avoid ReDoS in header parsing + ## [2.2.6.3] - 2023-03-02 - [CVE-2023-27530] Introduce multipart_total_part_limit to limit total parts diff --git a/lib/rack/version.rb b/lib/rack/version.rb index 0c38a46d..d451de43 100644 --- a/lib/rack/version.rb +++ b/lib/rack/version.rb @@ -20,7 +20,7 @@ module Rack VERSION.join(".") end - RELEASE = "2.2.6.3" + RELEASE = "2.2.6.4" # Return the Rack release as a dotted string. def self.release |