From: Graham Leggett <minfrin@apache.org>
Date: Sun, 16 Jan 2022 13:44:07 +0000 (+0000)
Subject: Propose.
X-Git-Tag: 2.4.53-rc1-candidate~97
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ebdee156c9fc42b9a8a6cba47b11216bf59d0308;p=thirdparty%2Fapache%2Fhttpd.git

Propose.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1897124 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/STATUS b/STATUS
index feb6e22f70e..27c9785eccb 100644
--- a/STATUS
+++ b/STATUS
@@ -196,6 +196,17 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
         https://svn.apache.org/repos/asf/httpd/httpd/patches/2.4.x/httpd-dbm.patch
      +1: minfrin
 
+  *) Add the ldap function to the expression API, allowing LDAP filters and
+     distinguished names based on expressions to be escaped correctly to
+     guard against LDAP injection.
+     Trunk version of patch:
+        https://svn.apache.org/r1589986
+        https://svn.apache.org/r1589995
+        https://svn.apache.org/r1633528
+     Backport version for 2.4.x of patch:
+        https://svn.apache.org/repos/asf/httpd/httpd/patches/2.4.x/httpd-2.4-ldap-expr.patch
+     +1: minfrin
+
 
 PATCHES/ISSUES THAT ARE BEING WORKED
   [ New entries should be added at the START of the list ]