apr-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From s.@apache.org
Subject svn commit: r1293697 - /apr/apr/branches/1.4.x/CHANGES
Date Sat, 25 Feb 2012 21:30:58 GMT
Author: sf
Date: Sat Feb 25 21:30:57 2012
New Revision: 1293697

URL: http://svn.apache.org/viewvc?rev=1293697&view=rev
Log:
reword entry for CVE-2012-0840

Modified:
    apr/apr/branches/1.4.x/CHANGES

Modified: apr/apr/branches/1.4.x/CHANGES
URL: http://svn.apache.org/viewvc/apr/apr/branches/1.4.x/CHANGES?rev=1293697&r1=1293696&r2=1293697&view=diff
==============================================================================
--- apr/apr/branches/1.4.x/CHANGES [utf-8] (original)
+++ apr/apr/branches/1.4.x/CHANGES [utf-8] Sat Feb 25 21:30:57 2012
@@ -8,8 +8,8 @@ Changes for APR 1.4.6
   *) Flush write buffer before truncate call on a file.
      [Mladen Turk]
 
-  *) Security: CVE-2012-0840, oCERT-2011-003
-     Randomise hashes by providing a seed. 
+  *) Randomise hashes by providing a seed. 
+     Assigned CVE-2012-0840, oCERT-2011-003, but not known to be exploitable.
      [Bojan Smojver, Branko ─îibej, Ruediger Pluem et al.]
 
   *) apr_random: Prevent segfault if pool used to initialize apr_random is



Mime
View raw message