]> granicus.if.org Git - apache/commit
projects / apache / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 23e90b6) | patch
Merge r1657261 from trunk:
authorEric Covener <covener@apache.org>
Wed, 4 Mar 2015 19:18:27 +0000 (19:18 +0000)
committerEric Covener <covener@apache.org>
Wed, 4 Mar 2015 19:18:27 +0000 (19:18 +0000)
commit52dd3e5e00672ba7e3c41296e53d4f53b0fada6a
treefcd3365d2b5fdb301379dfd64d7df70c14d2dce3tree | snapshot
parent23e90b697e2d29f864dbc2b3e2d4eb5738297037commit | diff
Merge r1657261 from trunk:

  *) SECURITY: CVE-2015-0228 (cve.mitre.org)
     mod_lua: A maliciously crafted websockets PING after a script
     calls r:wsupgrade() can cause a child process crash.
     [Edward Lu <Chaosed0 gmail.com>]

Discovered by Guido Vranken <guidovranken gmail.com>

Submitted by: Edward Lu
Committed by: covener

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1664118 13f79535-47bb-0310-9956-ffa450edef68
CHANGES diff | blob | history
STATUS diff | blob | history
modules/lua/lua_request.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.