NEWS file for release 0.11.1.

Uninett · Mar 9, 2016 · 76aaae4 · 76aaae4
1 parent 338c9ff
commit 76aaae4
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/NEWS b/NEWS
@@ -19,6 +19,18 @@ In addition this release contains the following new features and fixes:
 
 * Fix AssertionConsumerService lookup for PAOS requests.
 
+Version 0.11.1
+---------------------------------------------------------------------------
+
+Security fixes:
+
+* [CVE-2016-2145] Fix DOS attack (Apache worker process crash) due to
+  incorrect error handling when reading POST data from client.
+
+* [CVE-2016-2146] Fix DOS attack (Apache worker process crash /
+  resource exhaustion) due to missing size checks when reading
+  POST data.
+
 Version 0.11.0
 ---------------------------------------------------------------------------