From: Jim Jagielski <jim@apache.org>
Date: Fri, 30 May 2008 12:43:34 +0000 (+0000)
Subject: Add in CVE fix for balancer-manager
X-Git-Tag: 2.2.9~67
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1ab58f908ab3db393ea482eedf47efe4e023c245;p=thirdparty%2Fapache%2Fhttpd.git

Add in CVE fix for balancer-manager


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@661693 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/STATUS b/STATUS
index 53c9db5baa6..33dd0a8a658 100644
--- a/STATUS
+++ b/STATUS
@@ -175,6 +175,14 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
          Trunk version of patch works
     +1: jim
 
+ * proxy_balancer: Prevent CSRF attacks against the balancer-manager
+   (CVE-2007-6420)
+   Trunk version of patch:
+         http://svn.apache.org/viewvc?view=rev&revision=661666
+   Backport version for 2.2.x of patch:
+         Trunk version of patch works (minus CHANGES conflict)
+    +1: 
+
 PATCHES/ISSUES THAT ARE STALLED
 
    * beos MPM: Create pmain pool and run modules' child_init hooks when