From: Jeff Trawick Date: Wed, 3 Mar 2010 11:49:06 +0000 (+0000) Subject: reflect assignment of CVE-2010-0434 X-Git-Tag: 2.3.6~408 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=3913a638db81c35e9ea7c29f4f845cc1a97b0398;p=thirdparty%2Fapache%2Fhttpd.git reflect assignment of CVE-2010-0434 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@918428 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/CHANGES b/CHANGES index 3b213a12e7c..f3e69f7091d 100644 --- a/CHANGES +++ b/CHANGES @@ -101,7 +101,8 @@ Changes with Apache 2.3.6 Changes with Apache 2.3.5 - *) Ensure each subrequest has a shallow copy of headers_in so that the + *) SECURITY: CVE-2010-0434 (cve.mitre.org) + Ensure each subrequest has a shallow copy of headers_in so that the parent request headers are not corrupted. Eliminates a problematic optimization in the case of no request body. PR 48359 [Jake Scott, William Rowe, Ruediger Pluem]