Changeset 2125

Show
Ignore:
Timestamp:
03/10/2008 09:28:30 PM (4 months ago)
Author:
darix
Message:

- added CVE for the mod_userdir bug

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • branches/lighttpd-1.4.x/NEWS

    r2124 r2125  
    4949  * fix min-procs handling in mod_scgi.c, just set to max-procs (patch from #623) 
    5050  * fix sending "408 - Timeout" instead of "410 - Gone" for timedout urls in mod_secdownload (#1440) 
    51   * workaround #1587: require userdir.path to be set to enable mod_userdir (empty string allowed) 
     51  * workaround #1587: require userdir.path to be set to enable mod_userdir (empty string allowed) (CVE-2008-1270) 
    5252  * make configure checks for --with-pcre, --with-zlib and --with-bzip2 failing if the headers aren't found 
    5353  * fixed handling of waitpid() == EINTR mod_ssi on solaris