joe/kami-parse-server
Public Access
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: certificate in Apple Game Center auth adapter not validated [skip release] (#8055)

Browse Source
This commit is contained in:
Manuel
2022-06-17 19:32:30 +02:00
committed by GitHub
parent ed7a25d5be
commit 4c2aa63fd2
5 changed files with 218 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
changelogs/CHANGELOG_release.md
View File

@@ -1,3 +1,10 @@
## [5.2.2](https://github.com/parse-community/parse-server/compare/5.2.1...5.2.2) (2022-06-17)
### Bug Fixes
* certificate in Apple Game Center auth adapter not validated; this fixes a security vulnerability in which authentication could be bypassed using a fake certificate; if you are using the Apple Gamer Center auth adapter it is your responsibility to keep its root certificate up-to-date and we advice you read the security advisory ([GHSA-rh9j-f5f8-rvgc](https://github.com/parse-community/parse-server/security/advisories/GHSA-rh9j-f5f8-rvgc)) ([ba2b0a9](https://github.com/parse-community/parse-server/commit/ba2b0a9cb9a568817a114b132a4c2e0911d76df1))
## [5.2.1](https://github.com/parse-community/parse-server/compare/5.2.0...5.2.1) (2022-05-01)