You are viewing a plain text version of this content. The canonical link for it is here.

Posted to cvs@httpd.apache.org by co...@apache.org on 2012/07/01 00:55:10 UTC

svn commit: r1355832 - /httpd/httpd/branches/2.4.x/STATUS

Author: covener
Date: Sat Jun 30 22:55:09 2012
New Revision: 1355832

URL: http://svn.apache.org/viewvc?rev=1355832&view=rev
Log:
propose low impact mod_negotiation CVE for 2.4

Modified:
    httpd/httpd/branches/2.4.x/STATUS

Modified: httpd/httpd/branches/2.4.x/STATUS
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/STATUS?rev=1355832&r1=1355831&r2=1355832&view=diff
==============================================================================
--- httpd/httpd/branches/2.4.x/STATUS (original)
+++ httpd/httpd/branches/2.4.x/STATUS Sat Jun 30 22:55:09 2012
@@ -152,6 +152,11 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
      2.4.x patch: trunk patch (ex CHANGES) works
      +1: jorton
 
+   * mod_negotiation: CVE-2012-2687 XSS in mod_negotiation
+     trunk patch: http://svn.apache.org/viewvc?view=revision&revision=1349905
+     2.4.x patch: trunk works
+     +1 covener
+
 PATCHES/ISSUES THAT ARE STALLED
 
   * cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will be