Skip to content

Commit 0535f4f

Browse files
authored
Update CHANGELOG.md (#2814)
1 parent d95ab31 commit 0535f4f

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

CHANGELOG.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/)
5050
**Who benefits**: Developers consuming metadata via DatabaseMetaData.getIndexInfo() on SQL Server or Azure Synapse DW.
5151
**Impact**: Replaces CachedRowSet merging with a UNION ALL query, ensuring standard JDBC cursor behavior while maintaining columnstore index support.
5252

53-
- **Address a hostname validation vulnerability by securely parsing certificate common names.**
53+
- **Address a hostname validation vulnerability by securely parsing certificate common names.** [#2801](https://github.com/microsoft/mssql-jdbc/pull/2801)
5454
**What was fixed**: Secure hostname validation is enforced by replacing the vulnerable CN parsing logic in SQLServerCertificateUtils.java, preventing spoofing attacks.
5555
**Who benefits**: All users of the SQL Server JDBC driver, especially those relying on TLS for secure connections, benefit from improved certificate validation.
5656
**Impact**: This fix closes a security gap, protecting applications from man-in-the-middle attacks and ensuring compliance with security best practices.

0 commit comments

Comments
 (0)