From: Eric Covener <covener@apache.org>
Date: Thu, 5 Mar 2015 02:34:42 +0000 (+0000)
Subject: propose errordoc 400 CVE, switch another vote syntax
X-Git-Tag: 2.4.13~369
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=34e660ad81270c76a653703a57b10a8574476175;p=apache

propose errordoc 400 CVE, switch another vote syntax


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1664207 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/STATUS b/STATUS
index 6fce26b494..81eb54efa9 100644
--- a/STATUS
+++ b/STATUS
@@ -255,8 +255,15 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
      sized 664 byte array per merge to a hash table.
      trunk patch: http://svn.apache.org/r1661448
      2.4.x patch: http://people.apache.org/~minfrin/httpd-core-errordocument24-3.patch
-     minfrin: +1
+     +1: minfrin
 
+  *) SECURITY: CVE-2015-0253 (cve.mitre.org)
+     core: Fix a crash introduced in with ErrorDocument 400 pointing
+     to a local URL-path with the INCLUDES filter active, introduced
+     in 2.4.11. PR 57531. [Yann Ylavic]
+     trunk patch: http://svn.apache.org/r1664205
+     2.4.x patch: trunk works
+     +1 covener
 
 OTHER PROPOSALS