From: Bill Stoddard <stoddard@apache.org>
Date: Wed, 26 Sep 2001 14:47:15 +0000 (+0000)
Subject: Sorry, forgot to commit the CHANGES file along with the recent commit to
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a7ca49171c580e5e3e4ede0adc20a4563a940c91;p=thirdparty%2Fapache%2Fhttpd.git

Sorry, forgot to commit the CHANGES file along with the recent commit to
src/win32/os.c


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@91151 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/src/CHANGES b/src/CHANGES
index b5f3940b51d..f35b6e29a8b 100644
--- a/src/CHANGES
+++ b/src/CHANGES
@@ -1,5 +1,14 @@
 Changes with Apache 1.3.21
 
+  *) Win32 SECURITY: The default installation could lead to mod_negotiation
+     and mod_dir/mod_autoindex displaying a directory listing instead of
+     the index.html.* files, if a very long path was created artificially
+     by using many slashes. Now a 403 FORBIDDEN is returned. This
+     problem was similar to and in the same area as the problem
+     reported and fixed by Martin Kraemer in 1.3.18, only the scope
+     is much narrower and is specific to Windows.
+     [Bill Stoddard]
+
   *) Update the mime.types file to the registered media types as
      of 2001-09-25, and add xsl, so, dll extensions [Mark Cox]