diff options
| author | lkundrak <lkundrak> | 2007-06-28 01:24:39 +0000 |
|---|---|---|
| committer | lkundrak <lkundrak> | 2007-06-28 01:24:39 +0000 |
| commit | f09b9dab0253d2fe43f660c12bcd1b93887f0420 (patch) | |
| tree | 23f7496db16e9971ef00d73f7885adf716414975 /www/apache/patches | |
| parent | f23fca0568e01cacc1aa0aee70db18171a1ef774 (diff) | |
| download | pkgsrc-f09b9dab0253d2fe43f660c12bcd1b93887f0420.tar.gz | |
Description for one patch referred to incorrect issue, the other patch
lacked ending semicolons.
Diffstat (limited to 'www/apache/patches')
| -rw-r--r-- | www/apache/patches/patch-ar | 4 | ||||
| -rw-r--r-- | www/apache/patches/patch-as | 6 |
2 files changed, 5 insertions, 5 deletions
diff --git a/www/apache/patches/patch-ar b/www/apache/patches/patch-ar index 6df52647684..14c506d7a3f 100644 --- a/www/apache/patches/patch-ar +++ b/www/apache/patches/patch-ar @@ -1,6 +1,6 @@ -$NetBSD: patch-ar,v 1.6 2007/06/28 00:43:36 lkundrak Exp $ +$NetBSD: patch-ar,v 1.7 2007/06/28 01:24:39 lkundrak Exp $ -Fix for CVE-2007-1863 remote crash when mod_cache enabled. +Fix for CVE-2007-3304 denial of service. --- src/main/http_main.c.orig 2007-06-28 02:10:30.000000000 +0200 +++ src/main/http_main.c diff --git a/www/apache/patches/patch-as b/www/apache/patches/patch-as index e8feacb19f0..dbdbb54d98c 100644 --- a/www/apache/patches/patch-as +++ b/www/apache/patches/patch-as @@ -1,4 +1,4 @@ -$NetBSD: patch-as,v 1.6 2007/06/28 00:43:36 lkundrak Exp $ +$NetBSD: patch-as,v 1.7 2007/06/28 01:24:39 lkundrak Exp $ Fix for CVE-2006-5752 XSS in mod_status with ExtendedStatus on. @@ -36,7 +36,7 @@ Fix for CVE-2006-5752 XSS in mod_status with ExtendedStatus on. score_record.client, vhost ? vhost->server_hostname : "(unavailable)", - ap_escape_html(r->pool, score_record.request)); -+ ap_escape_html(r->pool, ap_escape_logitem(r->pool, score_record.request))) ++ ap_escape_html(r->pool, ap_escape_logitem(r->pool, score_record.request))); #else ap_rprintf(r, "<td>%s<td nowrap>%s<td nowrap>%s</tr>\n\n", @@ -44,7 +44,7 @@ Fix for CVE-2006-5752 XSS in mod_status with ExtendedStatus on. vhost ? ap_escape_html(r->pool, vhost->server_hostname) : "(unavailable)", - ap_escape_html(r->pool, score_record.request)); -+ ap_escape_html(r->pool, ap_escape_logitem(r->pool, score_record.request))) ++ ap_escape_html(r->pool, ap_escape_logitem(r->pool, score_record.request))); #endif } /* no_table_report */ } /* !short_report */ |