From: Jim Jagielski <jim@apache.org>
Date: Wed, 5 Oct 2011 18:38:32 +0000 (+0000)
Subject: Add patch... both backport and showstopper.
X-Git-Tag: 2.2.22~125
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=95e92e7f6655a174f112d010957c343abd88ed51;p=thirdparty%2Fapache%2Fhttpd.git

Add patch... both backport and showstopper.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1179373 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/STATUS b/STATUS
index 0af1d06fe2c..78e62cefad9 100644
--- a/STATUS
+++ b/STATUS
@@ -89,7 +89,11 @@ CURRENT RELEASE NOTES:
 
 RELEASE SHOWSTOPPERS:
 
-
+  * SECURITY (CVE-2011-3368): Prevent unintended pattern expansion in some
+    reverse proxy configurations by strictly validating the request-URI.
+    Trunk patch: http://svn.apache.org/viewvc?rev=1179239&view=rev
+    2.2.x patch: http://www.apache.org/dist/httpd/patches/apply_to_2.2.21/CVE-2011-3368.patch
+    +1:
 
 PATCHES ACCEPTED TO BACKPORT FROM TRUNK:
   [ start all new proposals below, under PATCHES PROPOSED. ]