Also add Mark's backport of the mod_cache; all security fixes now

proposed for 2.2 and 2.0.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@551963 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/STATUS b/STATUS
index b7dd7e49f5fe4eda96edaafdc969c69d95d6f9eb..d38132e12660c1278b3e1e0a370e8638260f86e4 100644 (file)
--- a/STATUS
+++ b/STATUS
@@ -161,6 +161,14 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
         http://svn.apache.org/viewvc?view=rev&rev=549159
       +1: jorton
 
+    * SECURITY: CVE-2007-1863
+      mod_cache fix for handling Cache-Control attributes
+      Trunk version of patch:
+        http://svn.apache.org/viewvc?view=rev&rev=535617
+      2.0.x version of patch:
+        http://people.apache.org/~mjc/cve-2007-1863-2.0.patch
+      +1: jorton
+
 PATCHES TO BACKPORT THAT ARE ON HOLD OR NOT GOING ANYWHERE SOON:
 
     *) mod_headers: Support {...}s tag for SSL variable lookup.