apr-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From traw...@apache.org
Subject svn commit: r1169990 - /apr/apr/branches/0.9.x/CHANGES
Date Tue, 13 Sep 2011 00:41:56 GMT
Author: trawick
Date: Tue Sep 13 00:41:55 2011
New Revision: 1169990

URL: http://svn.apache.org/viewvc?rev=1169990&view=rev
Log:
add entry for  CVE-2011-0419/apr_fnmatch() issue

see r1128717 for the matching code

Modified:
    apr/apr/branches/0.9.x/CHANGES

Modified: apr/apr/branches/0.9.x/CHANGES
URL: http://svn.apache.org/viewvc/apr/apr/branches/0.9.x/CHANGES?rev=1169990&r1=1169989&r2=1169990&view=diff
==============================================================================
--- apr/apr/branches/0.9.x/CHANGES [utf-8] (original)
+++ apr/apr/branches/0.9.x/CHANGES [utf-8] Tue Sep 13 00:41:55 2011
@@ -1,6 +1,11 @@
                                                      -*- coding: utf-8 -*-
 Changes with APR 0.9.20
 
+  *) Security: CVE-2011-0419
+     Reimplement apr_fnmatch() from scratch using a non-recursive
+     algorithm; now has improved compliance with the fnmatch() spec.
+     [William Rowe]
+
   *) Updated config.guess and config.sub.  [Rainer Jung]
 
   *) Fix flag character '#' in combination with format character 'x' in



Mime
View raw message