#
# Open Build Service 2.10.10
#

Please read the README.md file for initial installation
instructions or use the OBS Appliance from

  http://openbuildservice.org/download/

The dist/README.UPDATERS file has information for people updating
from a previous OBS release.


Bugfixes
========

* frontend:
  - CVE-2020-15169:      Potential XSS vulnerability in Action View
  - CVE-2020-8184:       Percent-encoded cookies can be used to overwrite existing
                         prefixed cookie names
  - GHSA-g6wq-qcwm-j5g2: ReDoS vulnerability in Sec-WebSocket-Extensions parser
  - GHSA-vr8q-g5c7-m54m: Nokogiri::XML::Schema trusts input by default,
                         exposing risk of an XXE vulnerability
