Changeset 2121

Show
Ignore:
Timestamp:
03/10/2008 03:54:38 PM (4 months ago)
Author:
darix
Message:

- added cve numbers for DOS and mod_cgi bug

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • branches/lighttpd-1.4.x/NEWS

    r2120 r2121  
    2727  * reset conditional cache (#1164) 
    2828  * create directories in mod_compress (was broken with alias/userdir) (#1027) 
    29   * fixed out of range access in fd array (#1562, #372) 
     29  * fixed out of range access in fd array (#1562, #372) (CVE-2008-0983) 
    3030  * mod_compress should check if the request is already handled, e.g. by fastcgi (#1565) 
    3131  * remove broken workaround for buggy Opera version with ssl/chunked encoding (#285) 
    …… 
    4646  * fixed body handling of status 300 requests  
    4747  * spawn-fcgi: only try to connect to unix socket (not tcp) before spawning (#1575) 
    48   * fix sending source of cgi script instead of 500 error if fork fails 
     48  * fix sending source of cgi script instead of 500 error if fork fails (CVE-2008-1111) 
    4949  * fix min-procs handling in mod_scgi.c, just set to max-procs (patch from #623) 
    5050  * fix sending "408 - Timeout" instead of "410 - Gone" for timedout urls in mod_secdownload (#1440)