Commit 06e77018 authored by Rainer Jung's avatar Rainer Jung
Browse files

Promote.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@943882 13f79535-47bb-0310-9956-ffa450edef68
parent 8e3dc23f
Loading
Loading
Loading
Loading
+16 −16
Changes for STATUS: 16 added lines, 16 removed lines.
Original line number Diff line number Diff line
@@ -125,6 +125,22 @@ PATCHES ACCEPTED TO BACKPORT FROM TRUNK:
       http://people.apache.org/~fuankg/diffs/httpd-2.0.x-ap_vhost_iterate_given_conn.diff
    +1: fuankg, wrowe, pgollucci

  * mod_proxy_ftp, CVE-2009-3095, sanity check authn credentials
    Patch in 2.2.x branch:
      http://svn.apache.org/viewvc?view=revision&revision=814847
    Backport:
      http://people.apache.org/~trawick/CVE-2009-3095-2.0.txt
    +1: pgollucci, poirier, rjung
      PG: whomever proposed this should vote for it

  * core output filter, CVE-2009-1891, consuming CPU after client disconnects
    Patch in 2.2.x branch:
      http://svn.apache.org/viewvc?view=revision&revision=791454
    Dan's patch posted last year for 2.0.x:
      http://people.apache.org/~trawick/CVE-2009-1891-2.0-poirier.txt
    +1: pgollucci, poirier, rjung
      PG: whomever proposed this should vote for it

PATCHES PROPOSED TO BACKPORT FROM TRUNK:
  [ please place SVN revisions from trunk here, so it is easy to
    identify exactly what the proposed changes are!  Add all new
@@ -200,22 +216,6 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
    +1: pgollucci, poirier
      PG: whomever proposed this should vote for it

  * mod_proxy_ftp, CVE-2009-3095, sanity check authn credentials
    Patch in 2.2.x branch:
      http://svn.apache.org/viewvc?view=revision&revision=814847
    Backport:
      http://people.apache.org/~trawick/CVE-2009-3095-2.0.txt
    +1: pgollucci, poirier, rjung
      PG: whomever proposed this should vote for it

  * core output filter, CVE-2009-1891, consuming CPU after client disconnects
    Patch in 2.2.x branch:
      http://svn.apache.org/viewvc?view=revision&revision=791454
    Dan's patch posted last year for 2.0.x:
      http://people.apache.org/~trawick/CVE-2009-1891-2.0-poirier.txt
    +1: pgollucci, poirier, rjung
      PG: whomever proposed this should vote for it

PATCHES TO BACKPORT THAT ARE ON HOLD OR NOT GOING ANYWHERE SOON:

    *) mod_headers: Support {...}s tag for SSL variable lookup.