From: Jim Jagielski <jim@apache.org>
Date: Fri, 17 Aug 2012 17:05:53 +0000 (+0000)
Subject: Get ready to tag 2.4.3
X-Git-Tag: 2.4.3~1
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=306e1e77aad6c3c4938876449981760b1c1706a4;p=apache

Get ready to tag 2.4.3


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1374364 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/CHANGES b/CHANGES
index 242ad2ec65..33c6b73207 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2,6 +2,11 @@
 
 Changes with Apache 2.4.3
 
+  *) SECURITY: CVE-2012-3502  (cve.mitre.org)
+     mod_proxy_ajp, mod_proxy_http: Fix an issue in back end
+     connection closing which could lead to privacy issues due
+     to a response mixup. PR 53727. [Rainer Jung]
+
   *) SECURITY: CVE-2012-2687 (cve.mitre.org)
      mod_negotiation: Escape filenames in variant list to prevent an
      possible XSS for a site where untrusted users can upload files to
@@ -9,7 +14,7 @@ Changes with Apache 2.4.3
 
   *) mod_authnz_ldap: Don't try a potentially expensive nested groups
      search before exhausting all AuthLDAPGroupAttribute checks on the
-     current group. PR52464 [Eric Covener]
+     current group. PR 52464 [Eric Covener]
 
   *) mod_lua: Add new directive LuaAuthzProvider to allow implementing an
      authorization provider in lua. [Stefan Fritsch]
diff --git a/STATUS b/STATUS
index a731ade269..fa7bb533a1 100644
--- a/STATUS
+++ b/STATUS
@@ -32,7 +32,7 @@ Release history:
     [NOTE that x.{odd}.z versions are strictly Alpha/Beta releases,
           while x.{even}.z versions are Stable/GA releases.]
 
-    2.4.3   : In development. Jim proposes a T&R around Aug 17.
+    2.4.3   : Tagged on August 17, 2012.
     2.4.2   : Tagged on April 5, 2012. Released Apr 17, 2012.
     2.4.1   : Tagged on February 13, 2012. Released Feb 21, 2012.
     2.4.0   : Tagged on January 16, 2012, not released.
diff --git a/include/ap_release.h b/include/ap_release.h
index 6a0e6fcd47..cb15fd1a96 100644
--- a/include/ap_release.h
+++ b/include/ap_release.h
@@ -46,7 +46,7 @@
 #define AP_SERVER_MAJORVERSION_NUMBER 2
 #define AP_SERVER_MINORVERSION_NUMBER 4
 #define AP_SERVER_PATCHLEVEL_NUMBER   3
-#define AP_SERVER_DEVBUILD_BOOLEAN    1
+#define AP_SERVER_DEVBUILD_BOOLEAN    0
 #define AP_SERVER_ADD_STRING          "-dev"
 
 /* Synchronize the above with docs/manual/style/version.ent */