Elevate this to a showstopper, 2.0.64 should not occur without, as noted

by trawick.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@996743 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/STATUS b/STATUS
index 250e76ab5b7628763181550f88de56082c990c12..f512a68d5e357819d5760df8bd0987c17c433a34 100644 (file)
--- a/STATUS
+++ b/STATUS
@@ -122,6 +122,10 @@ CURRENT RELEASE NOTES:
 
 RELEASE SHOWSTOPPERS:
 
+  * CVE-2010-1452 fix for mod_dav
+    Trunk patch: http://svn.apache.org/viewvc?view=revision&revision=966348
+      (mod_cache and mod_session portions don't apply to 2.0.x)
+    2.0.x patch: http://archive.apache.org/dist/httpd/patches/apply_to_2.0.63/CVE-2010-1452-patch-2.0.txt
 
 PATCHES ACCEPTED TO BACKPORT FROM TRUNK:
   [ start all new proposals below, under PATCHES PROPOSED. ]
@@ -206,12 +210,6 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
 
 PATCHES TO BACKPORT THAT ARE ON HOLD OR NOT GOING ANYWHERE SOON:
 
-  * CVE-2010-1452 fix for mod_dav
-    Trunk patch: http://svn.apache.org/viewvc?view=revision&revision=966348
-      (mod_cache and mod_session portions don't apply to 2.0.x)
-    2.0.x patch: http://archive.apache.org/dist/httpd/patches/apply_to_2.0.63/CVE-2010-1452-patch-2.0.txt
-    wrowe observes: nothing belongs in STATUS without a champion/sponsor/at least 1 +1
-
     *) mod_headers: Support {...}s tag for SSL variable lookup.
        http://www.apache.org/~jorton/mod_headers-2.0-ssl.diff
        +1: jorton, trawick