marc 98/03/13 13:55:58
Modified: src Tag: APACHE_1_2_X CHANGES
Log:
fresh and bare.
Revision Changes Path
No revision
No revision
1.286.2.78 +4 -0 apache-1.2/src/CHANGES
Index: CHANGES
===================================================================
RCS file: /export/home/cvs/apache-1.2/src/CHANGES,v
retrieving revision 1.286.2.77
retrieving revision 1.286.2.78
diff -u -r1.286.2.77 -r1.286.2.78
--- CHANGES 1998/03/05 22:54:30 1.286.2.77
+++ CHANGES 1998/03/13 21:55:57 1.286.2.78
@@ -1,5 +1,9 @@
Changes with Apache 1.2.6
+ *) htpasswd now correctly terminates the salt passed to crypt().
+ On some systems this caused it to generate invalid passwords.
+ [Matthew Reimer <[EMAIL PROTECTED]>] PR#1946
+
*) SECURITY: "UserDir /abspath" without a * in the path would allow
remote users to access "/~.." and bypass access restrictions
(but note /~../.. was handled properly).
