Commit e067c290 authored by William A. Rowe Jr's avatar William A. Rowe Jr
Browse files

Elevate this to a showstopper, 2.0.64 should not occur without, as noted 

by trawick.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@996743 13f79535-47bb-0310-9956-ffa450edef68
parent 13896be0

STATUS

+4 −6
Changes for STATUS: 4 added lines, 6 removed lines.
Original line number Diff line number Diff line
@@ -122,6 +122,10 @@ CURRENT RELEASE NOTES: 


RELEASE SHOWSTOPPERS:



  * CVE-2010-1452 fix for mod_dav

    Trunk patch: http://svn.apache.org/viewvc?view=revision&revision=966348

      (mod_cache and mod_session portions don't apply to 2.0.x)

    2.0.x patch: http://archive.apache.org/dist/httpd/patches/apply_to_2.0.63/CVE-2010-1452-patch-2.0.txt



PATCHES ACCEPTED TO BACKPORT FROM TRUNK:

  [ start all new proposals below, under PATCHES PROPOSED. ]
@@ -206,12 +210,6 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK: 


PATCHES TO BACKPORT THAT ARE ON HOLD OR NOT GOING ANYWHERE SOON:



  * CVE-2010-1452 fix for mod_dav

    Trunk patch: http://svn.apache.org/viewvc?view=revision&revision=966348

      (mod_cache and mod_session portions don't apply to 2.0.x)

    2.0.x patch: http://archive.apache.org/dist/httpd/patches/apply_to_2.0.63/CVE-2010-1452-patch-2.0.txt

    wrowe observes: nothing belongs in STATUS without a champion/sponsor/at least 1 +1



    *) mod_headers: Support {...}s tag for SSL variable lookup.

       http://www.apache.org/~jorton/mod_headers-2.0-ssl.diff

       +1: jorton, trawick