You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by bu...@apache.org on 2016/12/20 20:04:55 UTC
svn commit: r1003197 - in /websites/staging/httpd/trunk/content: ./
security/vulnerabilities-httpd.xml security/vulnerabilities_24.html
Author: buildbot
Date: Tue Dec 20 20:04:54 2016
New Revision: 1003197
Log:
Staging update by buildbot for httpd
Modified:
websites/staging/httpd/trunk/content/ (props changed)
websites/staging/httpd/trunk/content/security/vulnerabilities-httpd.xml
websites/staging/httpd/trunk/content/security/vulnerabilities_24.html
Propchange: websites/staging/httpd/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Tue Dec 20 20:04:54 2016
@@ -1 +1 @@
-1775343
+1775348
Modified: websites/staging/httpd/trunk/content/security/vulnerabilities-httpd.xml
==============================================================================
--- websites/staging/httpd/trunk/content/security/vulnerabilities-httpd.xml (original)
+++ websites/staging/httpd/trunk/content/security/vulnerabilities-httpd.xml Tue Dec 20 20:04:54 2016
@@ -1,6 +1,6 @@
<security updated="20160726">
-<issue fixed="2.4.25" reported="20160511" public="20161220" released="20161220">
+<issue fixed="2.4.25" reported="20160210" public="20161220" released="20161220">
<cve name="CVE-2016-8743"/>
<severity level="0">TBD</severity>
<title>Apache HTTP Request Parsing Whitespace Defects</title>
@@ -52,7 +52,7 @@ not be enforced, such as exactly two SP
</p></description>
<acknowledgements>
We would like to thank David Dennerline at IBM Security's X-Force Researchers
-as well as Sergey Bobrov for each reporting this issue.
+as well as Régis Leroy for each reporting this issue.
</acknowledgements>
<affects prod="httpd" version="2.4.23"/>
<affects prod="httpd" version="2.4.20"/>
Modified: websites/staging/httpd/trunk/content/security/vulnerabilities_24.html
==============================================================================
--- websites/staging/httpd/trunk/content/security/vulnerabilities_24.html (original)
+++ websites/staging/httpd/trunk/content/security/vulnerabilities_24.html Tue Dec 20 20:04:54 2016
@@ -160,11 +160,11 @@ not be enforced, such as exactly two SP
<dd>
<p>Acknowledgements:
We would like to thank David Dennerline at IBM Security's X-Force Researchers
-as well as Sergey Bobrov for each reporting this issue.
+as well as Régis Leroy for each reporting this issue.
</p>
</dd>
<dd>
- Reported to security team: 11th May 2016<br/>
+ Reported to security team: 10th February 2016<br/>
Issue public: 20th December 2016<br/></dd>
<dd>
Update Released: 20th December 2016<br/></dd>