You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by kk...@apache.org on 2015/02/13 01:20:17 UTC

svn commit: r1659443 - /tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml

Author: kkolinko
Date: Fri Feb 13 00:20:16 2015
New Revision: 1659443

URL: http://svn.apache.org/r1659443
Log:
Add CVE-2014-0227 to changelog

Modified:
    tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml

Modified: tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml
URL: http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?rev=1659443&r1=1659442&r2=1659443&view=diff
==============================================================================
--- tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml Fri Feb 13 00:20:16 2015
@@ -1142,6 +1142,12 @@
         chain of "elseif"s. (kkolinko)
       </scode>
       <fix>
+        Fix CVE-2014-0227:
+        Various improvements to ChunkedInputFilter including clean-up, i18n for
+        error messages and adding an error flag to allow subsequent attempts at
+        reading after an error to fail fast. (markt)
+      </fix>
+      <fix>
         If request contains an unrecognized Expect header, respond with error
         417 (Expectation Failed), according to RFC2616 chapter 14.20. (markt)
       </fix>



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org