[ANNOUNCE] libapreq2-2.15 Released

libapreq2-2.15 Released The Apache Software Foundation and The Apache HTTP Server Project are pleased to announce the 2.15 release of libapreq2. This Announcement notes significant changes introduced by this release. libapreq2-2.15 is released under the Apache License version 2.0. It is

CVE-2019-12412: libapreq2 null pointer dereference

CVE-2019-12412: libapreq2 null pointer dereference Severity: important Vendor: The Apache Software Foundation Versions Affected: libapreq2 2.07 to 2.13 Description: In libapreq2 versions 2.07 through 2.13 inclusive, a flaw in the multipart parser can deference a null pointer leading to a proce

Re: [ANNOUNCE] libapreq2-2.15 Released

Thanks, Joe, for your efforts with this release! Should there be a v2_15 tag in http://svn.apache.org/viewvc/httpd/apreq/tags/ ? FWIW, I successfully compiled and tested it with Apache httpd 2.4.41 and mod_perl 2.0.11 on CentOS 6.10. My httpd and mod_perl are 32-bit/i686 for silly legacy reason