| CVE 2023 46118_1_Reduce_default_HTTP_API_request_body_size_limit_to_10_MiB.patch | (download) |
deps/rabbitmq_management/BUILD.bazel |
3 2 + 1 - 0 !
deps/rabbitmq_management/Makefile |
3 2 + 1 - 0 !
deps/rabbitmq_management/priv/schema/rabbitmq_management.schema |
16 16 + 0 - 0 !
3 files changed, 20 insertions(+), 2 deletions(-) |
cve-2023-46118 (1/2): reduce default http api request body size limit to 10 mib
per discussion with the team.
.
It should be enough to accomodate a definition file with about
100K queues.
|
| CVE 2023 46118_2_Introduce_HTTP_request_body_limit_for_definition_uploads.patch | (download) |
deps/rabbitmq_management/include/rabbit_mgmt.hrl |
2 2 + 0 - 0 !
deps/rabbitmq_management/priv/schema/rabbitmq_management.schema |
17 17 + 0 - 0 !
deps/rabbitmq_management/src/rabbit_mgmt_util.erl |
24 18 + 6 - 0 !
deps/rabbitmq_management/src/rabbit_mgmt_wm_definitions.erl |
11 9 + 2 - 0 !
4 files changed, 46 insertions(+), 8 deletions(-) |
cve-2023-46118 (2/2): introduce http request body limit for definition uploads
The default is 20 MiB, which is enough to upload
a definition file with 200K queues, a few virtual host
and a few users. In other words, it should accomodate
a lot of environments.
|