Skip to content

Commit 5c9cd93

Browse files
authored
Add link for CVE-2025-59250 (spoofing vulnerability) in 12.8.2 notes (#2811)
1 parent 592fde0 commit 5c9cd93

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

CHANGELOG.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/)
55

66
## [12.8.2] Hotfix & Stable Release
77
### Fixed issues
8-
- **Address a hostname validation vulnerability by securely parsing certificate common names.**
8+
- **Address a hostname validation vulnerability by securely parsing certificate common names. [#2804](https://github.com/microsoft/mssql-jdbc/pull/2804)**
99
**What was fixed**: Secure hostname validation is enforced by replacing the vulnerable CN parsing logic in SQLServerCertificateUtils.java, preventing spoofing attacks.
1010
**Who benefits**: All users of the SQL Server JDBC driver, especially those relying on TLS for secure connections, benefit from improved certificate validation.
1111

0 commit comments

Comments
 (0)