You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ma...@apache.org on 2011/07/13 15:36:44 UTC
svn commit: r1146010 - /tomcat/trunk/webapps/docs/changelog.xml
Author: markt
Date: Wed Jul 13 13:36:44 2011
New Revision: 1146010
URL: http://svn.apache.org/viewvc?rev=1146010&view=rev
Log:
Add CVE reference for sendfile issues
Modified:
tomcat/trunk/webapps/docs/changelog.xml
Modified: tomcat/trunk/webapps/docs/changelog.xml
URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1146010&r1=1146009&r2=1146010&view=diff
==============================================================================
--- tomcat/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/trunk/webapps/docs/changelog.xml Wed Jul 13 13:36:44 2011
@@ -121,9 +121,9 @@
is used. Fixes null thread name in access log and JMX MBean. (rjung)
</fix>
<fix>
- Protect against infinite loops (HTTP NIO) and crashes (HTTP APR) if
- sendfile is configured to send more data than is available in the file.
- (markt)
+ Fix CVE-2011-2526. Protect against infinite loops (HTTP NIO) and crashes
+ (HTTP APR) if sendfile is configured to send more data than is available
+ in the file. (markt)
</fix>
<fix>
Prevent NPEs when a socket is closed in non-error conditions after
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org