Document the +fast-redirects{} HTTP response splitting fix

[privoxy.git] / ChangeLog

diff --git a/ChangeLog b/ChangeLog
index b0e69b3..4a8e6ef 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -4,6 +4,10 @@ ChangeLog for Privoxy
 *** Version 3.0.18 Stable ***
 
 - Bug fixes:
+  - If the redirect URL contains characters RFC 3986 doesn't permit,
+    they are (re)encoded. Not doing this makes Privoxy versions from
+    3.0.5 to 3.0.17 susceptible to HTTP response splitting (CWE-113)
+    attacks if the +fast-redirects{check-decoded-url} action is used.
   - Fix a logic bug that could cause Privoxy to reuse a server
     socket after it got tainted by a server-header-tagger-induced
     block that was triggered before the whole server response had