Gentoo Archives: gentoo-commits

From: "Benedikt Boehm (hollow)" <hollow@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] apache r212 - trunk/dist/2.2/patches
Date: Fri, 29 Aug 2008 13:25:32
Message-Id: E1KZ3yi-0003MP-7u@stork.gentoo.org
1 Author: hollow
2 Date: 2008-08-29 13:25:27 +0000 (Fri, 29 Aug 2008)
3 New Revision: 212
4
5 Added:
6 trunk/dist/2.2/patches/10_all_CVE-2008-2939.patch
7 Log:
8 add patch for CVE-2008-2939
9
10 Added: trunk/dist/2.2/patches/10_all_CVE-2008-2939.patch
11 ===================================================================
12 --- trunk/dist/2.2/patches/10_all_CVE-2008-2939.patch (rev 0)
13 +++ trunk/dist/2.2/patches/10_all_CVE-2008-2939.patch 2008-08-29 13:25:27 UTC (rev 212)
14 @@ -0,0 +1,10 @@
15 +--- httpd/httpd/branches/2.2.x/modules/proxy/mod_proxy_ftp.c 2008/08/05 19:00:05 682869
16 ++++ httpd/httpd/branches/2.2.x/modules/proxy/mod_proxy_ftp.c 2008/08/05 19:01:50 682870
17 +@@ -383,6 +383,7 @@
18 + c->bucket_alloc));
19 + }
20 + if (wildcard != NULL) {
21 ++ wildcard = ap_escape_html(p, wildcard);
22 + APR_BRIGADE_INSERT_TAIL(out, apr_bucket_pool_create(wildcard,
23 + strlen(wildcard), p,
24 + c->bucket_alloc));