http://svn.apache.org/r1662246 (updated CHANGES entry)
2.4.x patch: trunk works (modulo CHANGES)
http://people.apache.org/~ylavic/httpd-2.4.x-mod_deflate-PR56872.patch
- ylavic: +1
+ +1: ylavic
*) mod_proxy: Use the correct server name for SNI in case the backend
SSL connection itself is established via a proxy server. PR 57139
trunk patch: http://svn.apache.org/r1634120
2.4.x patch: trunk works (modulo CHANGES)
- ylavic: +1
+ +1: ylavic
*) mpm_event: Clear and restore sbh in notify_suspend() and notify_resume()
respectively. This merges a missing fix from r1545736 (sbh = NULL before
trunk patch: http://svn.apache.org/r1663017
2.4.x patch: http://people.apache.org/~ylavic/httpd-2.4.x-mpm_event-notify_suspend_sbh.patch
(trunk works, but the above contains the CHANGES entry, which is 2.4.x only...)
- ylavic: +1
+ +1 ylavic
*) ab: Add missing longest request (100%) to CSV export. PR57614.
trunk patch: http://svn.apache.org/r1661913
2.4.x patch: trunk works (modulo CHANGES)
- ylavic: +1
+ +1: ylavic
*) SECURITY: CVE-2015-0228 (cve.mitre.org)
mod_lua: A maliciously crafted websockets PING after a script
trunk patch: http://svn.apache.org/viewvc?view=revision&revision=1657261
2.4.x patch: trunk works
Note: Technically CTR but it's a CVE.
- covener: +1
+ +1: covener
OTHER PROPOSALS