You are viewing a plain text version of this content. The canonical link for it is here.

Posted to cvs@httpd.apache.org by tr...@apache.org on 2010/03/03 12:48:24 UTC

svn commit: r918427 - /httpd/httpd/branches/2.2.x/CHANGES

Author: trawick
Date: Wed Mar  3 11:48:24 2010
New Revision: 918427

URL: http://svn.apache.org/viewvc?rev=918427&view=rev
Log:
reflect assignment of CVE-2010-0434

Modified:
    httpd/httpd/branches/2.2.x/CHANGES

Modified: httpd/httpd/branches/2.2.x/CHANGES
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?rev=918427&r1=918426&r2=918427&view=diff
==============================================================================
--- httpd/httpd/branches/2.2.x/CHANGES [utf-8] (original)
+++ httpd/httpd/branches/2.2.x/CHANGES [utf-8] Wed Mar  3 11:48:24 2010
@@ -23,7 +23,8 @@
      processing is completed, avoiding orphaned callback pointers.
      [Brett Gervasoni <brettg senseofsecurity.com>, Jeff Trawick]
 
-  *) Ensure each subrequest has a shallow copy of headers_in so that the
+  *) SECURITY: CVE-2010-0434 (cve.mitre.org)
+     Ensure each subrequest has a shallow copy of headers_in so that the
      parent request headers are not corrupted.  Elimiates a problematic
      optimization in the case of no request body.  PR 48359
      [Jake Scott, William Rowe, Ruediger Pluem]