You are viewing a plain text version of this content. The canonical link for it is here.

Posted to cvs@httpd.apache.org by ji...@apache.org on 2014/03/11 17:09:37 UTC

svn propchange: r1575400 - svn:log

Author: jim
Revision: 1575400
Modified property: svn:log

Modified: svn:log at Tue Mar 11 16:09:37 2014
------------------------------------------------------------------------------
--- svn:log (original)
+++ svn:log Tue Mar 11 16:09:37 2014
@@ -1,3 +1,6 @@
+CVE-2014-0098 (reported by Rainer Canavan <rainer-apache 7val com>)
+Segfaults w/ truncated cookie logging.
+
 Clean up the cookie logging parser to recognize only the cookie=value pairs,
 not valueless cookies.  This refactors multiple passes over the same string
 buffer into a single pass parser.