You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by rp...@apache.org on 2009/04/10 10:08:42 UTC
svn commit: r763885 - /httpd/httpd/trunk/CHANGES
Author: rpluem
Date: Fri Apr 10 08:08:41 2009
New Revision: 763885
URL: http://svn.apache.org/viewvc?rev=763885&view=rev
Log:
* Add CVE number
Modified:
httpd/httpd/trunk/CHANGES
Modified: httpd/httpd/trunk/CHANGES
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?rev=763885&r1=763884&r2=763885&view=diff
==============================================================================
--- httpd/httpd/trunk/CHANGES [utf-8] (original)
+++ httpd/httpd/trunk/CHANGES [utf-8] Fri Apr 10 08:08:41 2009
@@ -2,7 +2,8 @@
Changes with Apache 2.3.3
- *) mod_proxy_ajp: Avoid delivering content from a previous request which
+ *) SECURITY: CVE-2008-5519 (cve.mitre.org)
+ mod_proxy_ajp: Avoid delivering content from a previous request which
failed to send a request body. PR 46949 [Ruediger Pluem]
*) mod_proxy_ajp: Forward remote port information by default.