Mailing-List: contact cvs-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Subject: svn commit: r1355832 - /httpd/httpd/branches/2.4.x/STATUS
Date: Sat, 30 Jun 2012 22:55:10 -0000
To: cvs@httpd.apache.org
From: covener@apache.org
Message-Id: <20120630225510.B42502388A02@eris.apache.org>

Author: covener
Date: Sat Jun 30 22:55:09 2012
New Revision: 1355832

URL: http://svn.apache.org/viewvc?rev=1355832&view=rev
Log:
propose low impact mod_negotiation CVE for 2.4

Modified:
    httpd/httpd/branches/2.4.x/STATUS

Modified: httpd/httpd/branches/2.4.x/STATUS
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/STATUS?rev=1355832&r1=1355831&r2=1355832&view=diff
==============================================================================
--- httpd/httpd/branches/2.4.x/STATUS (original)
+++ httpd/httpd/branches/2.4.x/STATUS Sat Jun 30 22:55:09 2012
@@ -152,6 +152,11 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
      2.4.x patch: trunk patch (ex CHANGES) works
      +1: jorton
 
+   * mod_negotiation: CVE-2012-2687 XSS in mod_negotiation
+     trunk patch: http://svn.apache.org/viewvc?view=revision&revision=1349905
+     2.4.x patch: trunk works
+     +1 covener
+
 PATCHES/ISSUES THAT ARE STALLED
 
   * cross-compile: allow to provide CC_FOR_BUILD so that gen_test_char will be