Author: markt Date: Wed Jul 13 13:36:44 2011 New Revision: 1146010 URL: http://svn.apache.org/viewvc?rev=1146010&view=rev Log: Add CVE reference for sendfile issues
Modified: tomcat/trunk/webapps/docs/changelog.xml Modified: tomcat/trunk/webapps/docs/changelog.xml URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1146010&r1=1146009&r2=1146010&view=diff ============================================================================== --- tomcat/trunk/webapps/docs/changelog.xml (original) +++ tomcat/trunk/webapps/docs/changelog.xml Wed Jul 13 13:36:44 2011 @@ -121,9 +121,9 @@ is used. Fixes null thread name in access log and JMX MBean. (rjung) </fix> <fix> - Protect against infinite loops (HTTP NIO) and crashes (HTTP APR) if - sendfile is configured to send more data than is available in the file. - (markt) + Fix CVE-2011-2526. Protect against infinite loops (HTTP NIO) and crashes + (HTTP APR) if sendfile is configured to send more data than is available + in the file. (markt) </fix> <fix> Prevent NPEs when a socket is closed in non-error conditions after --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org