From: Jeff Trawick Date: Sat, 28 Jan 2012 21:03:38 +0000 (+0000) Subject: vote, propose X-Git-Tag: 2.0.65~89 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=16a6f73a9a30357e5f9dd77fa09c248818c612a2;p=thirdparty%2Fapache%2Fhttpd.git vote, propose git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@1237165 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/STATUS b/STATUS index c982cb1a3ed..d04e7013378 100644 --- a/STATUS +++ b/STATUS @@ -138,7 +138,7 @@ RELEASE SHOWSTOPPERS: is enabled, could allow local users to gain privileges via a .htaccess file. [Stefan Fritsch, Greg Ames] From 2.2.x; http://svn.apache.org/viewvc?view=revision&revision=1227280 - +1: gregames, wrowe + +1: gregames, wrowe, trawick *) SECURITY: CVE-2011-4317 (cve.mitre.org) Resolve additional cases of URL rewriting with ProxyPassMatch or @@ -160,6 +160,9 @@ RELEASE SHOWSTOPPERS: when no custom ErrorDocument is specified for status code 400. [Eric Covener] + r1234837 on 2.0.x: + http://people.apache.org/~trawick/2.0-CVE-2012-0053-r1234837.patch + +1: trawick PATCHES ACCEPTED TO BACKPORT FROM TRUNK: [ start all new proposals below, under PATCHES PROPOSED. ]