From ff433d7a2122a747a4cedf5b488fb2ba410ba37f Mon Sep 17 00:00:00 2001 From: markt Date: Wed, 13 Jul 2011 13:36:44 +0000 Subject: [PATCH] Add CVE reference for sendfile issues git-svn-id: https://svn.apache.org/repos/asf/tomcat/trunk@1146010 13f79535-47bb-0310-9956-ffa450edef68 --- webapps/docs/changelog.xml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml index cfa4eec2e..f2e61b3b6 100644 --- a/webapps/docs/changelog.xml +++ b/webapps/docs/changelog.xml @@ -121,9 +121,9 @@ is used. Fixes null thread name in access log and JMX MBean. (rjung) - Protect against infinite loops (HTTP NIO) and crashes (HTTP APR) if - sendfile is configured to send more data than is available in the file. - (markt) + Fix CVE-2011-2526. Protect against infinite loops (HTTP NIO) and crashes + (HTTP APR) if sendfile is configured to send more data than is available + in the file. (markt) Prevent NPEs when a socket is closed in non-error conditions after -- 2.11.0