couchdb-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Robert Newson <rnew...@apache.org>
Subject Re: When did the fix for CVE-2010-0009 land? (Attn. Jan)
Date Mon, 25 Feb 2013 19:45:58 GMT
looks like 0.10.2 (git diff 0.10.1..0.10.2 src/couchdb/couch_util.erl)

B.

On 25 February 2013 19:36, Noah Slater <nslater@apache.org> wrote:
> Hi,
>
> The note for CVE-2010-0009 was never added to NEWS or CHANGES. Based on
> Jan's disclosure, it looks like the fix only landed in 1.0.2. Is that
> correct? If it is, I will correct our documentation.
>
> Please reply ASAP, this is blocking other work.
>
> Thanks!
>
> --
> NS

Mime
View raw message