From 42388336534a9ee21e9db684bd71680a7f2de94a Mon Sep 17 00:00:00 2001 From: Abhishek Lekshmanan Date: Fri, 24 Apr 2020 12:34:59 +0200 Subject: [PATCH] doc: releases: add release notes for v14.2.9 Signed-off-by: Abhishek Lekshmanan --- doc/releases/nautilus.rst | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/doc/releases/nautilus.rst b/doc/releases/nautilus.rst index 87fb0bba2a5..0c28e42b566 100644 --- a/doc/releases/nautilus.rst +++ b/doc/releases/nautilus.rst @@ -1,3 +1,16 @@ +v14.2.9 Nautilus +================ + +This is the ninth bugfix release of Nautilus. This release fixes a +couple of security issues in RGW & Messenger V2. We recommend all users +to upgrade to this release. + +Notable Changes +--------------- + +- CVE-2020-1759: Fixed nonce reuse in msgr V2 secure mode +- CVE-2020-1760: Fixed XSS due to RGW GetObject header-splitting + v14.2.8 Nautilus ================ -- 2.39.5