Return-Path: Delivered-To: apmail-httpd-dev-archive@www.apache.org Received: (qmail 46227 invoked from network); 8 Feb 2005 20:24:15 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur-2.apache.org with SMTP; 8 Feb 2005 20:24:15 -0000 Received: (qmail 80540 invoked by uid 500); 8 Feb 2005 20:24:11 -0000 Delivered-To: apmail-httpd-dev-archive@httpd.apache.org Received: (qmail 80499 invoked by uid 500); 8 Feb 2005 20:24:11 -0000 Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: list-post: Delivered-To: mailing list dev@httpd.apache.org Received: (qmail 80484 invoked by uid 99); 8 Feb 2005 20:24:11 -0000 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (hermes.apache.org: local policy) Received: from jupiter.hal-nine-zero-zero-zero.net (HELO jupiter.hal-nine-zero-zero-zero.net) (217.160.171.50) by apache.org (qpsmtpd/0.28) with SMTP; Tue, 08 Feb 2005 12:24:08 -0800 Received: (qmail 20662 invoked from network); 8 Feb 2005 20:24:07 -0000 Received: from unknown (HELO p3E991BC2.dip0.t-ipconnect.de) (62.153.27.194) by jupiter.hal-nine-zero-zero-zero.net with SMTP; 8 Feb 2005 20:24:07 -0000 From: =?iso-8859-15?q?Andr=E9_Malo?= Organization: TIMTOWTDI To: dev@httpd.apache.org Subject: Re: 2.0.53 Change log & Mime fix Date: Tue, 8 Feb 2005 21:24:00 +0100 User-Agent: KMail/1.7.2 References: <1107893555.4590.201.camel@dragon.cnet.cnwk.com> In-Reply-To: <1107893555.4590.201.camel@dragon.cnet.cnwk.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-15" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Message-Id: <200502082124.00992@news.perlig.de> X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N * Ronald Park wrote: > Is there a PR associated with the Security fix for the DOS attack via > the MIME folded headers? Or, more importantly, a patch file showing > what was changed? I'd like to see about back-porting it to an older > version. :) http://svn.apache.org/viewcvs.cgi/httpd/httpd/branches/APACHE_2_0_BRANCH/se= rver/protocol.c?rev=3D105730&r1=3D105278&r2=3D105730&makepatch=3D1&diff_for= mat=3Du or if you prefer svn diff: $ cd checkout/of/2.0.x/branch $ svn diff -r 105729:105730 nd =2D-=20 my @japh =3D (sub{q~Just~},sub{q~Another~},sub{q~Perl~},sub{q~Hacker~}); my $japh =3D q[sub japh { }]; print join ######################### [ $japh =3D~ /{(.)}/] -> [0] =3D> map $_ -> () # Andr=E9 Malo # =3D> @japh; # http://pub.perlig.de/ #