diff options
| author | Aleksey Myasnikov <asmyasnikov@ydb.tech> | 2023-11-07 17:48:24 +0300 |
|---|---|---|
| committer | asmyasnikov <asmyasnikov@ydb.tech> | 2023-11-07 18:34:03 +0300 |
| commit | b31f6ac49dfc3f7092e78e23ab67507d9de74bf8 (patch) | |
| tree | 087d6709fc612f5407876f58342a2e1209e2da8b | |
| parent | fc7837a09a9743e0f8c1d35898599de2fdd2f384 (diff) | |
| download | ydb-b31f6ac49dfc3f7092e78e23ab67507d9de74bf8.tar.gz | |
Update security-changelog.md
Update security-changelog.md
Pull Request resolved: https://github.com/ydb-platform/ydb/pull/407
| -rw-r--r-- | ydb/docs/en/core/security-changelog.md | 10 | ||||
| -rw-r--r-- | ydb/docs/ru/core/security-changelog.md | 10 |
2 files changed, 20 insertions, 0 deletions
diff --git a/ydb/docs/en/core/security-changelog.md b/ydb/docs/en/core/security-changelog.md index bfd809d7a4..f962c8dff8 100644 --- a/ydb/docs/en/core/security-changelog.md +++ b/ydb/docs/en/core/security-changelog.md @@ -9,3 +9,13 @@ Out-of-bounds read was discovered in YDB server. An attacker could construct a q Link to CVE: [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28228). Credits: Maxim Arnold. + +## Fixed in YDB Go SDK v3.53.3, 17.10.2023 2023-10-17 {#17-10-2023} + +### CVE-2023-45825 {#cve-2023-45825} + +Token in custom credentials object can leak through logs. + +Link to CVE: [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28228](https://nvd.nist.gov/vuln/detail/CVE-2023-45825). + +Credits: Sergey Foster. diff --git a/ydb/docs/ru/core/security-changelog.md b/ydb/docs/ru/core/security-changelog.md index 239a352bff..741498bb59 100644 --- a/ydb/docs/ru/core/security-changelog.md +++ b/ydb/docs/ru/core/security-changelog.md @@ -9,3 +9,13 @@ Ссылка на CVE: [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28228). Обнаружено благодаря Максиму Арнольду. + +## Исправлено в YDB Go SDK v3.53.3, 17.10.2023 2023-10-17 {#17-10-2023} + +### CVE-2023-45825 {#cve-2023-45825} + +Токен авторизации может утекать через логи + +Link to CVE: [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28228](https://nvd.nist.gov/vuln/detail/CVE-2023-45825). + +Обнаружено благодаря Сергею Фостер. |