From: Luca Toscano <elukey@apache.org>
Date: Tue, 12 Sep 2017 08:18:06 +0000 (+0000)
Subject: Proposed backport of r1808008
X-Git-Tag: 2.4.28~29
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=09e50e5e81694a7a034c50488aafe2c5d0725a57;p=apache

Proposed backport of r1808008

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1808086 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/STATUS b/STATUS
index edcce75bcd..6318d88f17 100644
--- a/STATUS
+++ b/STATUS
@@ -195,6 +195,12 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
      ylavic: Missing r1805190? Also, I'd use double/%lf instead of float/%f for
              floating point arithmetic...
 
+  *) htdigest: prevent a buffer overflow when a string exceeds its maximum size
+               in a password file. PR: 61511
+     trunk patch: http://svn.apache.org/r1808008
+                  http://svn.apache.org/r1808085
+     2.4.x patch: svn merge -c1808008 -c1808085 ^/httpd/httpd/trunk .
+     +1: elukey
 
 PATCHES/ISSUES THAT ARE BEING WORKED
   [ New entries should be added at the START of the list ]