#
# Open Build Service 2.10.21
#

Please read the README.md file for initial installation
instructions or use the OBS Appliance from

  http://openbuildservice.org/download/

The dist/README.UPDATERS file has information for people updating
from a previous OBS release.


Update of the Base Distributions
================================

We have updated the base distribution of the appliance to Leap 15.5. We also
have updated the supported distros to the 2 latest Leap versions / SLES 15 and
SLES 12 Service Packs. In other words, the supported distributions are now:

    - openSUSE Leap 15.5 x86_64
    - openSUSE Leap 15.4 x86_64
    - SUSE Linux Enterprise Server 15 Service Pack 5 x86_64
    - SUSE Linux Enterprise Server 15 Service Pack 4 x86_64
    - SUSE Linux Enterprise Server 12 Service Pack 5 x86_64
    - SUSE Linux Enterprise Server 12 Service Pack 4 x86_64

If you are running OBS on a previous distribution version, we kindly ask you to
update your systems to a supported one.


Bugfixes
========
Frontend:
 * Update rack to version 2.2.6.4
   - Fixes CVE-2023-27539 Avoid ReDoS (https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS) in header parsing.
   - Fixes CVE-2023-27530 Possible DoS Vulnerability in Multipart MIME parsing.
