Propose
authorJacob Champion <jchampion@apache.org>
Tue, 6 Dec 2016 17:39:12 +0000 (17:39 +0000)
committerJacob Champion <jchampion@apache.org>
Tue, 6 Dec 2016 17:39:12 +0000 (17:39 +0000)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1772926 13f79535-47bb-0310-9956-ffa450edef68

STATUS

diff --git a/STATUS b/STATUS
index a94156c3534567ba8b8b5e7b0b6eb94765f20fe7..28d5257e7ba1f85423ec4c18dd889514a3b663d4 100644 (file)
--- a/STATUS
+++ b/STATUS
@@ -149,6 +149,13 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
      jailletc36: compatibility note missing in the XML file
      jim:        Will address during commit
 
+  *) SECURITY: CVE-2016-2161 (cve.mitre.org)
+     mod_auth_digest: Prevent segfaults during client entry allocation when the
+     shared memory space is exhausted. [Maksim Malyutin <m.malyutin dsec.ru>,
+     Eric Covener, Jacob Champion]
+     trunk patch: http://svn.apache.org/r1772919
+     2.4.x patch: trunk works (modulo CHANGES)
+     +1: jchampion
 
 
 PATCHES/ISSUES THAT ARE BEING WORKED