You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by co...@apache.org on 2026/05/04 11:45:35 UTC
(httpd-site) branch main updated: caught in changelog
This is an automated email from the ASF dual-hosted git repository.
covener pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/httpd-site.git
The following commit(s) were added to refs/heads/main by this push:
new a3ff0f8 caught in changelog
a3ff0f8 is described below
commit a3ff0f8026e80e632c34d6387eaf058d60caf091
Author: Eric Covener <ec...@us.ibm.com>
AuthorDate: Mon May 4 07:45:28 2026 -0400
caught in changelog
---
content/security/json/CVE-2026-29169.json | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/content/security/json/CVE-2026-29169.json b/content/security/json/CVE-2026-29169.json
index 212865c..307ee28 100644
--- a/content/security/json/CVE-2026-29169.json
+++ b/content/security/json/CVE-2026-29169.json
@@ -33,7 +33,7 @@
"value": "A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.<br><br>The only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version 1.2.0.<br><br>Users are recommended to upgrade to version 2.4.66, which fixes this issue, or remove mod_dav_lock.<br>"
}
],
- "value": "A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.\n\nThe only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version 1.2.0.\n\nUsers are recommended to upgrade to version 2.4.66, which fixes this issue, or remove mod_dav_lock."
+ "value": "A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.\n\nThe only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version 1.2.0.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes this issue, or remove mod_dav_lock."
}
],
"metrics": [