# changelog

author: Ryan O'Hara <rohara@redhat.com> - 1.8.15-1
changelog:
  - Update to 1.8.15
  - Fix denial of service attack via infinite recursion (CVE-2018-20103, #1658881)
  - Fix out-of-bound reads in dns_validate_dns_response (CVE-2018-20102, #1658882)


author: Ryan O'Hara <rohara@redhat.com> - 1.8.17-1
changelog:
  - Update to 1.8.17
  - Fix handling of priority flag in HEADERS frame in HTTP/2 decoder (CVE-2018-20615)


