You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by yl...@apache.org on 2015/03/02 21:41:07 UTC
svn commit: r1663425 - /httpd/httpd/branches/2.4.x/STATUS
Author: ylavic
Date: Mon Mar 2 20:41:07 2015
New Revision: 1663425
URL: http://svn.apache.org/r1663425
Log:
Vote.
Modified:
httpd/httpd/branches/2.4.x/STATUS
Modified: httpd/httpd/branches/2.4.x/STATUS
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/STATUS?rev=1663425&r1=1663424&r2=1663425&view=diff
==============================================================================
--- httpd/httpd/branches/2.4.x/STATUS (original)
+++ httpd/httpd/branches/2.4.x/STATUS Mon Mar 2 20:41:07 2015
@@ -106,6 +106,14 @@ RELEASE SHOWSTOPPERS:
PATCHES ACCEPTED TO BACKPORT FROM TRUNK:
[ start all new proposals below, under PATCHES PROPOSED. ]
+ *) SECURITY: CVE-2015-0228 (cve.mitre.org)
+ mod_lua: A maliciously crafted websockets PING after a script
+ calls r:wsupgrade() can cause a child process crash.
+ trunk patch: http://svn.apache.org/viewvc?view=revision&revision=1657261
+ 2.4.x patch: trunk works
+ Note: Technically CTR but it's a CVE.
+ +1: covener, minfrin, ylavic
+
PATCHES PROPOSED TO BACKPORT FROM TRUNK:
[ New proposals should be added at the end of the list ]
@@ -257,14 +265,6 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
2.4.x patch: http://people.apache.org/~minfrin/httpd-core-errordocument24-3.patch
minfrin: +1
- *) SECURITY: CVE-2015-0228 (cve.mitre.org)
- mod_lua: A maliciously crafted websockets PING after a script
- calls r:wsupgrade() can cause a child process crash.
- trunk patch: http://svn.apache.org/viewvc?view=revision&revision=1657261
- 2.4.x patch: trunk works
- Note: Technically CTR but it's a CVE.
- +1: covener, minfrin
-
OTHER PROPOSALS