Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id A5E9E200CC9 for ; Mon, 17 Jul 2017 12:39:17 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id A445E16381B; Mon, 17 Jul 2017 10:39:17 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id E29131637E0 for ; Mon, 17 Jul 2017 12:39:16 +0200 (CEST) Received: (qmail 71699 invoked by uid 500); 17 Jul 2017 10:39:15 -0000 Mailing-List: contact cvs-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list cvs@httpd.apache.org Received: (qmail 71690 invoked by uid 99); 17 Jul 2017 10:39:15 -0000 Received: from Unknown (HELO svn01-us-west.apache.org) (209.188.14.144) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 17 Jul 2017 10:39:15 +0000 Received: from svn01-us-west.apache.org (localhost [127.0.0.1]) by svn01-us-west.apache.org (ASF Mail Server at svn01-us-west.apache.org) with ESMTP id 663F33A049F for ; Mon, 17 Jul 2017 10:39:13 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn propchange: r1799235 - svn:log Date: Mon, 17 Jul 2017 10:39:11 -0000 To: cvs@httpd.apache.org From: ylavic@apache.org X-Mailer: svnmailer-1.0.9 Message-Id: <20170717103914.663F33A049F@svn01-us-west.apache.org> archived-at: Mon, 17 Jul 2017 10:39:17 -0000 Author: ylavic Revision: 1799235 Modified property: svn:log Modified: svn:log at Mon Jul 17 10:39:11 2017 ------------------------------------------------------------------------------ --- svn:log (original) +++ svn:log Mon Jul 17 10:39:11 2017 @@ -1,8 +1,8 @@ -Merge r1797550 from trunk: +SECURITY: CVE-2017-7679 (cve.mitre.org) +mod_mime can read one byte past the end of a buffer when sending a +malicious Content-Type response header. +Merge r1797550 from trunk: mod_mime: fix quoted pair scanning - Submitted By: ylavic - -