Module Name: src Committed By: snj Date: Fri Oct 15 23:21:43 UTC 2010
Modified Files: src/doc [netbsd-5-0]: CHANGES-5.0.3 Log Message: 1456. To generate a diff of this commit: cvs rdiff -u -r1.1.2.19 -r1.1.2.20 src/doc/CHANGES-5.0.3 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
Modified files: Index: src/doc/CHANGES-5.0.3 diff -u src/doc/CHANGES-5.0.3:1.1.2.19 src/doc/CHANGES-5.0.3:1.1.2.20 --- src/doc/CHANGES-5.0.3:1.1.2.19 Wed Sep 22 22:52:27 2010 +++ src/doc/CHANGES-5.0.3 Fri Oct 15 23:21:43 2010 @@ -1,4 +1,4 @@ -# $NetBSD: CHANGES-5.0.3,v 1.1.2.19 2010/09/22 22:52:27 snj Exp $ +# $NetBSD: CHANGES-5.0.3,v 1.1.2.20 2010/10/15 23:21:43 snj Exp $ A complete list of changes from the NetBSD 5.0.2 release to the NetBSD 5.0.3 release: @@ -339,3 +339,9 @@ Avoid integer overflow that can lead to buffer overflow. [christos, ticket #1455] +libexec/httpd/bozohttpd.c patch + + Fix a serious error in vhost handling; "Host:.." would allow + access to the next level directory from the virtual root directory. + [mrg, ticket #1456] +