add a showstopper Jeff might have found on users@

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1613655 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/STATUS b/STATUS
index a0a42c52f45498fed14135f2de16babaa78728af..321ca851df37bb5e6318041d92c529177ab8d21e 100644 (file)
--- a/STATUS
+++ b/STATUS
@@ -95,6 +95,8 @@ CURRENT RELEASE NOTES:
 
 RELEASE SHOWSTOPPERS:
 
+  * Something like CVE-2014-0118 (zipbomb) + PROXYREQ_REVERSE + LimitRequestBody looks 
+    like it may be broken in 2.4.10.
 
 PATCHES ACCEPTED TO BACKPORT FROM TRUNK:
   [ start all new proposals below, under PATCHES PROPOSED. ]