From: Eric Covener Date: Sat, 30 Jun 2012 22:50:15 +0000 (+0000) Subject: bump CVE to the top of CHANGES X-Git-Tag: 2.5.0-alpha~6690 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=aead8d0148ac001f77094d22fb2e68fb62b2c493;p=apache bump CVE to the top of CHANGES git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1355831 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/CHANGES b/CHANGES index 12cf3dcbbe..706120633f 100644 --- a/CHANGES +++ b/CHANGES @@ -1,13 +1,13 @@ -*- coding: utf-8 -*- Changes with Apache 2.5.0 - *) mod_ssl: Add RFC 5878 support. [Ben Laurie] - *) SECURITY: CVE-2012-2687 (cve.mitre.org) mod_negotiation: Escape filenames in variant list to prevent an possible XSS for a site where untrusted users can upload files to a location with MultiViews enabled. [Niels Heinen ] + *) mod_ssl: Add RFC 5878 support. [Ben Laurie] + *) mod_authz_core: If an expression in "Require expr" returns denied and references %{REMOTE_USER}, trigger authentication and retry. PR 52892. [Stefan Fritsch]