Merge pull request #4789 from p12tic/1.8.x-release

Release notes for 1.8.2
2019-05-23 04:41:10 +03:00 · 2019-05-23 04:41:10 +03:00 · e2db8794b1
parent 4bcf908392 a844457f05
commit e2db8794b1
2 changed files with 23 additions and 0 deletions
--- a/master/docs/relnotes/index.rst
+++ b/master/docs/relnotes/index.rst
@ -10,6 +10,28 @@ Release Notes

 .. towncrier release notes start

+Buildbot ``1.8.2`` ( ``2019-05-22`` )
+=====================================
+
+Bug fixes
+---------
+
+- Fix vulnerability in OAuth where user-submitted authorization token was used for authentication
+  (https://github.com/buildbot/buildbot/wiki/OAuth-vulnerability-in-using-submitted-authorization-token-for-authentication)
+  Thanks to Phillip Kuhrt for reporting it.
+
+
+Buildbot ``1.8.1`` ( ``2019-02-02`` )
+=====================================
+
+Bug fixes
+---------
+
+- Fix CRLF injection vulnerability with validating user provided redirect parameters
+  (https://github.com/buildbot/buildbot/wiki/CRLF-injection-in-Buildbot-login-and-logout-redirect-code)
+  Thanks to ``mik317`` and ``mariadb`` for reporting it.
+
+
 Buildbot ``1.8.0`` ( ``2019-01-20`` )
 =====================================

--- a/master/docs/spelling_wordlist.txt
+++ b/master/docs/spelling_wordlist.txt
@ -425,6 +425,7 @@ KiB
 kibibytes
 kube
 kubernetes
+Kuhrt
 kv
 kwargs
 latin