Skip to content

Commit ffca76d

Browse files
authored
Update CHANGELOG for hostname validation fix (#2810)
Added a reference to pull request #2798 for the hostname validation fix.
1 parent 2a5b4cc commit ffca76d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

CHANGELOG.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/)
55

66
## [12.2.1] Hotfix & Stable Release
77
### Fixed issues
8-
- **Address a hostname validation vulnerability by securely parsing certificate common names.**
8+
- **Address a hostname validation vulnerability by securely parsing certificate common names.** [#2798](https://github.com/microsoft/mssql-jdbc/pull/2798)
99
**What was fixed**: Secure hostname validation is enforced by replacing the vulnerable CN parsing logic in SQLServerCertificateUtils.java, preventing spoofing attacks.
1010
**Who benefits**: All users of the SQL Server JDBC driver, especially those relying on TLS for secure connections, benefit from improved certificate validation.
1111

0 commit comments

Comments
 (0)