Commit e51a3d94 authored by Yann Ylavic's avatar Yann Ylavic
Browse files

Credits. 

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1802129 13f79535-47bb-0310-9956-ffa450edef68
parent dcfafbeb

CHANGES

+3 −1
Original line number Diff line number Diff line
@@ -9,11 +9,13 @@ Changes with Apache 2.4.27 
     mod_http2: Read after free. When under stress, closing many connections,

     the HTTP/2 handling code would sometimes access memory after it has been

     freed, resulting in potentially erratic behaviour.

     [Stefan Eissing]



  *) SECURITY: CVE-2017-9788 (cve.mitre.org)

     mod_auth_digest: Uninitialized memory reflection.  The value placeholder

     in [Proxy-]Authorization headers type 'Digest' was not initialized or

     reset before or between successive key=value assignments.

     [William Rowe]



  *) COMPATIBILITY: mod_lua: Remove the undocumented exported 'apr_table'

     global variable when using Lua 5.2 or later. This was exported as a