Skip to content
This repository has been archived by the owner on Nov 11, 2024. It is now read-only.

Commit

Permalink
Update changelog
Browse files Browse the repository at this point in the history
  • Loading branch information
@babelouest
babelouest committed Mar 9, 2024
1 parent 90e3741 commit bb9fc57
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions CHANGELOG.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,10 @@
- Build with flag `-Wpedantic`
- Security: Mitigate HMAC signature side-channel attack (Thanks to Erwan Legrand) ([CVE-2024-25714](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25714))
- Breaking: Update `r_jwt_validate_claims` and `r_jwt_set_claims` to expect `rhn_int_t` values when using integer values
- Add x5u flag `R_FLAG_ALLOW_INFLATE` to manage compressed payload in JWS'
- Add x5u flag `R_FLAG_IGNORE_INFLATE` to manage compressed payload in JWEs
- Add functions `r_jws_get_inflate_payload`, `r_jwe_get_inflate_payload`, `r_jwe_advanced_decrypt_payload`
- Breaking: Update compressed payload management. By default, payload in JWS' will not be compressed or decompressed, unless using the x5u flag `R_FLAG_ALLOW_INFLATE` on parse or when setting the payload

## 1.1.13

Expand Down

0 comments on commit bb9fc57

Please sign in to comment.