Commit e0da07a4 authored by Eric Covener's avatar Eric Covener
Browse files

format CVE entries 



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1772895 13f79535-47bb-0310-9956-ffa450edef68
parent f4255f4a

CHANGES

+5 −2
Original line number Diff line number Diff line
@@ -2,12 +2,15 @@ 


Changes with Apache 2.4.24



  *) mod_http2: CVE-2016-8740: Mitigate DoS memory exhaustion via endless



  *) SECURITY: CVE-2016-8740 (cve.mitre.org)

     mod_http2: Mitigate DoS memory exhaustion via endless

     CONTINUATION frames.

     [Naveen Tiwari <naveen.tiwari@asu.edu> and CDF/SEFCOM at Arizona State

     University, Stefan Eissing]



  *) core: CVE-2016-5387: Mitigate [f]cgi "httpoxy" issues.

  *) SECURITY: CVE-2016-5387 (cve.mitre.org)

     core: Mitigate [f]cgi "httpoxy" issues.

     [Dominic Scheirlinck <dominic vendhq.com>, Yann Ylavic]



  *) Enforce http request grammer corresponding to RFC7230 for request lines