* CHANGES: Refer to CVE-2020-17525
@@ -27,7 +27,7 @@ Version 1.14.1
* Make the hot-backup.py script work with Python 3 (r1878855, r1878859)
* Fix an uninitialized read in FSFS (r1880374)
* Make mailer.py work properly with Python 3 (r1884427 et al)
- * Fix a potential NULL dereference in the config file parser (r1886019)
+ * Fix CVE-2020-17525: NULL dereference in mod_authz_svn (r1886019)
Developer-visible changes:
- General:
@@ -285,7 +285,7 @@ Version 1.10.7
* mod_dav_svn: Fix missing Last-Modified header on 'external' GET requests (r1866425)
* Fix formatting type size mismatches in FSFS (r1865987, -8)
* Fix an undefined behavior problem in FSFS caching code (r1876054)
- * Fix a potential NULL dereference in the config file parser (r1886019)
+ * Fix CVE-2020-17525: NULL dereference in mod_authz_svn (r1886019)
Developer-visible changes:
* Fix Requires(.private) fields in pkg-config files (r1863987, -90)
