openSUSE 15.2: 2021:1424-1 Moderate: Civetweb File Upload Security

This update for civetweb fixes the following issues:

Version 1.15:

* boo#1191938 / CVE-2020-27304: missing uploaded filepath validation in

the default form-based file upload mechanism

* New configuration for URL decoding

* Sanitize filenames in handle form

* Example ???embedded_c.c???: Do not overwrite files (possible security

issue)

* Remove obsolete examples

* Remove ???experimental??? label for some features

* Remove MG_LEGACY_INTERFACE that have been declared obsolete in 2017 or

earlier

* Modifications to build scripts, required due to changes in the test

environment

* Unix domain socket support fixed

* Fixes for NO_SSL_DL

* Fixes for some warnings / static code analysis

Version 1.14:

* Change SSL default setting to use TLS 1.2 as minimum (set config if you

need an earlier version)

* Add local_uri_raw field (not sanitized URI) to request_info

* Additional API functions and a callback after closing...