Skip to content

Commit 9641938

Browse files
authored
Update CHANGELOG with PR reference for hotfix (#2809)
Added a reference to pull request #2800 for the hostname validation fix in the changelog.
1 parent 0dbbfb7 commit 9641938

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

CHANGELOG.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/)
55

66
## [11.2.4] Hotfix & Stable Release
77
### Fixed issues
8-
- **Address a hostname validation vulnerability by securely parsing certificate common names.**
8+
- **Address a hostname validation vulnerability by securely parsing certificate common names.** [#2800](https://github.com/microsoft/mssql-jdbc/pull/2800)
99
**What was fixed**: Secure hostname validation is enforced by replacing the vulnerable CN parsing logic in SQLServerCertificateUtils.java, preventing spoofing attacks.
1010
**Who benefits**: All users of the SQL Server JDBC driver, especially those relying on TLS for secure connections, benefit from improved certificate validation.
1111

0 commit comments

Comments
 (0)