| commit | cde03fa0381fcb7f7d3ba0dff4e784eade1f3031 | [log] [tgz] |
|---|---|---|
| author | Senthil Kumaran <senthil@uthcode.com> | Sat Jul 30 23:51:13 2016 -0700 |
| committer | Senthil Kumaran <senthil@uthcode.com> | Sat Jul 30 23:51:13 2016 -0700 |
| tree | e5958851d32ee2b1d8296c33324fd80d6177e8df | |
| parent | bf5868d2c5a9bc742b69172820a34ea88bfe2591 [diff] [blame] | |
| parent | 7bfbd1d3c56b2a5281edeb7a8e21598618b7c1a3 [diff] [blame] |
[merge from 3.5] - Prevent HTTPoxy attack (CVE-2016-1000110) Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates that the script is in CGI mode. Issue #27568 Reported and patch contributed by Rémi Rampin.
diff --git a/Misc/ACKS b/Misc/ACKS index b9af726..926cdae 100644 --- a/Misc/ACKS +++ b/Misc/ACKS
@@ -1204,6 +1204,7 @@ Jeff Ramnani Varpu Rantala Brodie Rao +Rémi Rampin Senko Rasic Antti Rasinen Nikolaus Rath