# changelog

author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 1.0.3-7
changelog:
  - Fix CVE-2019-12779 libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack.
    CVE Link: https://nvd.nist.gov/vuln/detail/CVE-2019-12779
    Community Patch Link:
    https://github.com/ClusterLabs/libqb/commit/e322e98dc264bc5911d6fe1d371e55ac9f95a71e
    https://github.com/ClusterLabs/libqb/commit/7cd7b06d52ac80c343f362c7e39ef75495439dfc
    https://github.com/ClusterLabs/libqb/commit/6a4067c1d1764d93d255eccecfd8bf9f43cb0b4d


author: shinwell_hu <micromotive@qq.com> - 3.12.6-1
changelog:
  - Upgrade to 3.12.6 to fix following known CVEs
    CVE-2020-11077
    CVE-2020-11076
  - Workaround test failure on x forwarded protol


