Formal proposal for fix to CVE-2009-1195 compat issue.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@779180 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/STATUS b/STATUS
index b43cdf1e19a00ebdb951d70cfc229a4f608ee040..4be81a4006da8a83350c47ec5cf419f2b1191d1e 100644 (file)
--- a/STATUS
+++ b/STATUS
@@ -87,6 +87,12 @@ RELEASE SHOWSTOPPERS:
 * Resolve API breakage with OPT_INC* changes.  See thread
   "CVE-2009-1195 tweaks to preserve binary compatibility for stable branches"
 
+ * Fix backwards compat of options handling in CVE-2009-1105 fix:
+   trunk: N/A (2.2.x compat issue only)
+   2.2.x patch: 
+     http://people.apache.org/~jorton/ssi-opt-compat-v1.diff
+   +1: jorton
+
 PATCHES ACCEPTED TO BACKPORT FROM TRUNK:
   [ start all new proposals below, under PATCHES PROPOSED. ]