httpd-cvs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From jor...@apache.org
Subject cvs commit: httpd-2.0 CHANGES
Date Mon, 07 Jun 2004 11:02:53 GMT
jorton      2004/06/07 04:02:53

  Modified:    .        CHANGES
  Log:
  Synch with 2.0 branch.
  
  Revision  Changes    Path
  1.1509    +15 -0     httpd-2.0/CHANGES
  
  Index: CHANGES
  ===================================================================
  RCS file: /home/cvs/httpd-2.0/CHANGES,v
  retrieving revision 1.1508
  retrieving revision 1.1509
  diff -d -w -u -r1.1508 -r1.1509
  --- CHANGES	6 Jun 2004 22:24:27 -0000	1.1508
  +++ CHANGES	7 Jun 2004 11:02:52 -0000	1.1509
  @@ -378,6 +378,21 @@
   
   Changes with Apache 2.0.50
   
  +  *) SECURITY: CAN-2004-0488 (cve.mitre.org)
  +     mod_ssl: Fix a buffer overflow in the FakeBasicAuth code for a
  +     (trusted) client certificate subject DN which exceeds 6K in length.
  +     [Joe Orton]
  +
  +  *) mod_dav_fs: Fix MKCOL response for missing parent collections, which 
  +     caused issues for the Eclipse WebDAV extension.
  +     PR 29034.  [Joe Orton]
  +
  +  *) mod_deflate: Fix memory consumption (which was proportional to the
  +     response size).  PR 29318.  [Joe Orton]
  +
  +  *) mod_ssl: Log the errors returned on failure to load or initialize
  +     a crypto accelerator engine.  [Joe Orton]
  +
     *) Allow RequestHeader directives to be conditional. PR 27951.
        [Vincent Deffontaines <vincent gryzor.com>, André Malo]
   
  
  
  

Mime
View raw message