I just now realized this change drops the timezone differences when converting dates (apr_date_parse_http()). Is this okay?
---------- Forwarded message ---------- From: [EMAIL PROTECTED] <[EMAIL PROTECTED]> Date: Aug 6, 2007 7:15 PM Subject: svn commit: r563329 - in /httpd/httpd/branches/2.0.x: CHANGES STATUS modules/proxy/proxy_util.c To: [EMAIL PROTECTED] Author: covener Date: Mon Aug 6 16:15:02 2007 New Revision: 563329 URL: http://svn.apache.org/viewvc?view=rev&rev=563329 Log: backport mod_proxy date parsing buffer over-read (CVE-2007-3847) Submitted by: Davi Arnaut, Nick Kew Reviewed by: niq, rpluem, covener Modified: httpd/httpd/branches/2.0.x/CHANGES httpd/httpd/branches/2.0.x/STATUS httpd/httpd/branches/2.0.x/modules/proxy/proxy_util.c -- Eric Covener [EMAIL PROTECTED]
