httpd-cvs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From cove...@apache.org
Subject svn commit: r1208322 - /httpd/httpd/branches/2.2.x/CHANGES
Date Wed, 30 Nov 2011 08:37:28 GMT
Author: covener
Date: Wed Nov 30 08:37:27 2011
New Revision: 1208322

URL: http://svn.apache.org/viewvc?rev=1208322&view=rev
Log:
bump security change to the top 

Modified:
    httpd/httpd/branches/2.2.x/CHANGES

Modified: httpd/httpd/branches/2.2.x/CHANGES
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/CHANGES?rev=1208322&r1=1208321&r2=1208322&view=diff
==============================================================================
--- httpd/httpd/branches/2.2.x/CHANGES [utf-8] (original)
+++ httpd/httpd/branches/2.2.x/CHANGES [utf-8] Wed Nov 30 08:37:27 2011
@@ -1,6 +1,11 @@
                                                          -*- coding: utf-8 -*-
 Changes with Apache 2.2.22
 
+  *) SECURITY: CVE-2011-3368 (cve.mitre.org)
+     Reject requests where the request-URI does not match the HTTP
+     specification, preventing unexpected expansion of target URLs in
+     some reverse proxy configurations.  [Joe Orton]
+
   *) mod_log_config: Prevent segfault. PR 50861. [Torsten F�rtsch
      <torsten.foertsch gmx.net>]
 
@@ -10,11 +15,6 @@ Changes with Apache 2.2.22
      all vars from 3rd-party modules will be fixed. PR 13029 / 34985.
      [Guenter Knauf]
 
-  *) SECURITY: CVE-2011-3368 (cve.mitre.org)
-     Reject requests where the request-URI does not match the HTTP
-     specification, preventing unexpected expansion of target URLs in
-     some reverse proxy configurations.  [Joe Orton]
-
   *) core: Fix hook sorting for Perl modules, a regression introduced in
      2.2.21. PR: 45076. [Torsten Foertsch <torsten foertsch gmx net>]
 



Mime
View raw message