Return-Path: Delivered-To: apmail-httpd-cvs-archive@www.apache.org Received: (qmail 78851 invoked from network); 14 Sep 2010 02:58:30 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 14 Sep 2010 02:58:30 -0000 Received: (qmail 44496 invoked by uid 500); 14 Sep 2010 02:58:30 -0000 Delivered-To: apmail-httpd-cvs-archive@httpd.apache.org Received: (qmail 44286 invoked by uid 500); 14 Sep 2010 02:58:28 -0000 Mailing-List: contact cvs-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list cvs@httpd.apache.org Received: (qmail 44279 invoked by uid 99); 14 Sep 2010 02:58:28 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 14 Sep 2010 02:58:28 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.4] (HELO eris.apache.org) (140.211.11.4) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 14 Sep 2010 02:58:26 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id 5F58523888E7; Tue, 14 Sep 2010 02:58:05 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r996743 - /httpd/httpd/branches/2.0.x/STATUS Date: Tue, 14 Sep 2010 02:58:05 -0000 To: cvs@httpd.apache.org From: wrowe@apache.org X-Mailer: svnmailer-1.0.8 Message-Id: <20100914025805.5F58523888E7@eris.apache.org> X-Virus-Checked: Checked by ClamAV on apache.org Author: wrowe Date: Tue Sep 14 02:58:04 2010 New Revision: 996743 URL: http://svn.apache.org/viewvc?rev=996743&view=rev Log: Elevate this to a showstopper, 2.0.64 should not occur without, as noted by trawick. Modified: httpd/httpd/branches/2.0.x/STATUS Modified: httpd/httpd/branches/2.0.x/STATUS URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.0.x/STATUS?rev=996743&r1=996742&r2=996743&view=diff ============================================================================== --- httpd/httpd/branches/2.0.x/STATUS (original) +++ httpd/httpd/branches/2.0.x/STATUS Tue Sep 14 02:58:04 2010 @@ -122,6 +122,10 @@ CURRENT RELEASE NOTES: RELEASE SHOWSTOPPERS: + * CVE-2010-1452 fix for mod_dav + Trunk patch: http://svn.apache.org/viewvc?view=revision&revision=966348 + (mod_cache and mod_session portions don't apply to 2.0.x) + 2.0.x patch: http://archive.apache.org/dist/httpd/patches/apply_to_2.0.63/CVE-2010-1452-patch-2.0.txt PATCHES ACCEPTED TO BACKPORT FROM TRUNK: [ start all new proposals below, under PATCHES PROPOSED. ] @@ -206,12 +210,6 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK: PATCHES TO BACKPORT THAT ARE ON HOLD OR NOT GOING ANYWHERE SOON: - * CVE-2010-1452 fix for mod_dav - Trunk patch: http://svn.apache.org/viewvc?view=revision&revision=966348 - (mod_cache and mod_session portions don't apply to 2.0.x) - 2.0.x patch: http://archive.apache.org/dist/httpd/patches/apply_to_2.0.63/CVE-2010-1452-patch-2.0.txt - wrowe observes: nothing belongs in STATUS without a champion/sponsor/at least 1 +1 - *) mod_headers: Support {...}s tag for SSL variable lookup. http://www.apache.org/~jorton/mod_headers-2.0-ssl.diff +1: jorton, trawick