You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by jk...@apache.org on 2014/09/11 15:12:25 UTC
svn commit: r1624280 - /httpd/httpd/branches/2.4.x/STATUS
Author: jkaluza
Date: Thu Sep 11 13:12:25 2014
New Revision: 1624280
URL: http://svn.apache.org/r1624280
Log:
Propose r1624234.
Modified:
httpd/httpd/branches/2.4.x/STATUS
Modified: httpd/httpd/branches/2.4.x/STATUS
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/STATUS?rev=1624280&r1=1624279&r2=1624280&view=diff
==============================================================================
--- httpd/httpd/branches/2.4.x/STATUS (original)
+++ httpd/httpd/branches/2.4.x/STATUS Thu Sep 11 13:12:25 2014
@@ -217,6 +217,12 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
http://people.apache.org/~jim/patches/slotmem-loglevel.patch
+1: jim
+ * mod_cache: CVE-2014-3581 - Avoid a crash when Content-Type has an empty
+ value. PR56924.
+ trunk patch: http://svn.apache.org/r1624234
+ 2.4.x patch: trunk works (modulo CHANGES)
+ +1: jkaluza
+
OTHER PROPOSALS
* A list of further possible backports can be found at: