summaryrefslogtreecommitdiff
path: root/CHANGES
diff options
context:
space:
mode:
authorJim Jagielski <jim@apache.org>2012-09-30 15:44:46 +0000
committerJim Jagielski <jim@apache.org>2012-09-30 15:44:46 +0000
commit0e4325c01a73c9847ab616a406ee05ce7d9eb754 (patch)
treed943036a5b8a7cf39898c2b14965baecef9d0baf /CHANGES
parent524127f9cfe620f66a9e4d307a5712bdab466f19 (diff)
downloadhttpd-0e4325c01a73c9847ab616a406ee05ce7d9eb754.tar.gz
SECURITY: CVE-2012-0031 (cve.mitre.org)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@1392043 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'CHANGES')
-rw-r--r--CHANGES5
1 files changed, 5 insertions, 0 deletions
diff --git a/CHANGES b/CHANGES
index 6e7f87ec65..282ad34130 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,6 +1,11 @@
-*- coding: utf-8 -*-
Changes with Apache 2.0.65
+ *) SECURITY: CVE-2012-0031 (cve.mitre.org)
+ Fix scoreboard issue which could allow an unprivileged child process
+ could cause the parent to crash at shutdown rather than terminate
+ cleanly. [Joe Orton]
+
*) SECURITY: CVE-2011-3607 (cve.mitre.org)
core: Fix integer overflow in ap_pregsub. This can be triggered e.g.
with mod_setenvif via a malicious .htaccess. [Stefan Fritsch]