From aead8d0148ac001f77094d22fb2e68fb62b2c493 Mon Sep 17 00:00:00 2001 From: Eric Covener Date: Sat, 30 Jun 2012 22:50:15 +0000 Subject: [PATCH] bump CVE to the top of CHANGES git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1355831 13f79535-47bb-0310-9956-ffa450edef68 --- CHANGES | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/CHANGES b/CHANGES index 12cf3dcbbec..706120633f8 100644 --- a/CHANGES +++ b/CHANGES @@ -1,13 +1,13 @@ -*- coding: utf-8 -*- Changes with Apache 2.5.0 - *) mod_ssl: Add RFC 5878 support. [Ben Laurie] - *) SECURITY: CVE-2012-2687 (cve.mitre.org) mod_negotiation: Escape filenames in variant list to prevent an possible XSS for a site where untrusted users can upload files to a location with MultiViews enabled. [Niels Heinen ] + *) mod_ssl: Add RFC 5878 support. [Ben Laurie] + *) mod_authz_core: If an expression in "Require expr" returns denied and references %{REMOTE_USER}, trigger authentication and retry. PR 52892. [Stefan Fritsch] -- 2.47.2