# changelog

author: Kamil Dudka <kdudka@redhat.com> 7.53.1-7
changelog:
  - nss: use libnssckbi.so as the default source of trust
  - nss: do not leak PKCS #11 slot while loading a key (#1444860)


author: Kamil Dudka <kdudka@redhat.com> 7.53.1-10
changelog:
  - tftp: reject file name lengths that do not fit buffer (CVE-2017-1000100)
  - do not continue parsing of glob after range overflow (CVE-2017-1000101)


author: Kamil Dudka <kdudka@redhat.com> - 7.53.1-13
changelog:
  - fix NTLM buffer overflow via integer overflow (CVE-2017-8816)
  - fix FTP wildcard out of bounds read (CVE-2017-8817)


author: Kamil Dudka <kdudka@redhat.com> - 7.53.1-14
changelog:
  - http2: fix incorrect trailer buffer size (CVE-2018-1000005)
  - http: prevent custom Authorization headers in redirects (CVE-2018-1000007)


