What's wrong with this entry?
Simplified UNC Path Detection: The Windows UNC path detection was simplified from 8 security checks down to 1 basic pattern check. The new implementation removes specific checks for:
- IPv4 address-based UNC paths (e.g.,
\\192.168.1.1\share) - IPv6 address-based UNC paths (e.g.,
\\[fe80::1]\share) - WebDAV
DavWWWRootpatterns - SSL/port patterns like
@SSL@8080
File operations no longer check for UNC paths at all, while bash command execution retains basic UNC path blocking. The security impact is reduced coverage for IP-based UNC paths and WebDAV-specific attacks.
Old mB1() function at line 469909 (v2.0.36), new i2Q() function at line 222404, file path validation Cr2() at line 474880
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.