Skip to content

0.15.0

Compare
Choose a tag to compare
@robertcheramy robertcheramy released this 17 Feb 10:44
· 16 commits to master since this release

This release fixes a security issue on the RANCID migration page.
A non-authenticated user could gain control over the Linux user running oxidized-web. The RANCID migration page was already deprecated in version 0.14.0, so it has been completely removed in this new version.
Thank you to Jon O'Reilly and Jamie Riden from NetSPI for discovering and
reporting this security issue!

What's Changed

See CHANGELOG.md

New Contributors

Full Changelog: 0.14.0...0.15.0