Commit 58059f2b authored by Jeff Trawick's avatar Jeff Trawick
Browse files

follow up r920961 with the related CHANGES entry 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@920995 13f79535-47bb-0310-9956-ffa450edef68
parent 64f9779b

CHANGES

+5 −0
Changes for CHANGES: 5 added lines, 0 removed lines.
Original line number Diff line number Diff line 
                                                         -*- coding: utf-8 -*-

Changes with Apache 2.0.64



  *) SECURITY: CVE-2010-0425 (cve.mitre.org)

     mod_isapi: Do not unload an isapi .dll module until the request

     processing is completed, avoiding orphaned callback pointers.

     [Brett Gervasoni <brettg senseofsecurity.com>, Jeff Trawick]



  *) SECURITY: CVE-2008-2939 (cve.mitre.org)

     mod_proxy_ftp: Prevent XSS attacks when using wildcards in the path of

     the FTP URL. Discovered by Marc Bevand of Rapid7. [Ruediger Pluem]