Trunk patch: http://svn.apache.org/viewvc?view=revision&revision=966348
(mod_cache and mod_session portions don't apply to 2.0.x)
2.0.x patch: http://archive.apache.org/dist/httpd/patches/apply_to_2.0.63/CVE-2010-1452-patch-2.0.txt
- +1: wrowe
+ +1: wrowe, trawick
PATCHES ACCEPTED TO BACKPORT FROM TRUNK:
[ start all new proposals below, under PATCHES PROPOSED. ]
http://people.apache.org/~rjung/patches/cve-2009-3555_httpd_2_0_x-backport-r891282.patch
+1: rjung, pgollucci (+1 2.0.64 w/ this), wrowe
+ * mod_ssl: Use memmove instead of memcpy for overlapping buffers
+ Trunk patch: http://svn.apache.org/viewvc?view=rev&revision=683280
+ 2.0.x patch: Trunk patch works
+ +1: sf, jorton, trawick
+
PATCHES PROPOSED TO BACKPORT FROM TRUNK:
[ please place SVN revisions from trunk here, so it is easy to
identify exactly what the proposed changes are! Add all new
Use recent files from http://git.savannah.gnu.org/cgit/config.git.
+1: rjung
- * mod_ssl: Use memmove instead of memcpy for overlapping buffers
- Trunk patch: http://svn.apache.org/viewvc?view=rev&revision=683280
- 2.0.x patch: Trunk patch works
- +1: sf, jorton
-
PATCHES TO BACKPORT THAT ARE ON HOLD OR NOT GOING ANYWHERE SOON:
*) mod_headers: Support {...}s tag for SSL variable lookup.