You are viewing a plain text version of this content. The canonical link for it is here.

Posted to cvs@httpd.apache.org by jo...@apache.org on 2020/07/24 15:48:52 UTC

svn commit: r1880270 - in /httpd/apreq/trunk: CHANGES STATUS

Author: jorton
Date: Fri Jul 24 15:48:51 2020
New Revision: 1880270

URL: http://svn.apache.org/viewvc?rev=1880270&view=rev
Log:
The 2.14 release did not pass PMC vote.
Document changes since 2.14.

Modified:
    httpd/apreq/trunk/CHANGES
    httpd/apreq/trunk/STATUS

Modified: httpd/apreq/trunk/CHANGES
URL: http://svn.apache.org/viewvc/httpd/apreq/trunk/CHANGES?rev=1880270&r1=1880269&r2=1880270&view=diff
==============================================================================
--- httpd/apreq/trunk/CHANGES (original)
+++ httpd/apreq/trunk/CHANGES Fri Jul 24 15:48:51 2020
@@ -1,7 +1,18 @@
 /** @page apreq_changes CHANGES
 //! brief List of major changes.
 
-@section v2_14 Changes with libapreq2-2.14 (in development)
+@section v2_15 Changes with libapreq2-2.15 (in development)
+
+- SECURITY: CVE-2019-12412 (cve.mitre.org)
+  C API [Max Kellermann]
+  Fix a NULL pointer dereference when parsing malformed
+  multipart data in apreq_parse_multipart().
+
+- C API [Yann Ylavic]
+  In apreq_brigade_concat(), fix memory handling and create
+  the FILE bucket correctly.
+
+@section v2_14 Changes with libapreq2-2.14 (not released)
 
 - Build [stevehay]
   Fix httpd-2.4.x build for Win32.

Modified: httpd/apreq/trunk/STATUS
URL: http://svn.apache.org/viewvc/httpd/apreq/trunk/STATUS?rev=1880270&r1=1880269&r2=1880270&view=diff
==============================================================================
--- httpd/apreq/trunk/STATUS (original)
+++ httpd/apreq/trunk/STATUS Fri Jul 24 15:48:51 2020
@@ -1,6 +1,6 @@
 /** @page apreq_status STATUS
 
-    2.14 under developement
+    2.15 under developement
 
 Contributors looking for a mission: