From 4abf74d83695aca87aa5341a3db35a5298692f7b Mon Sep 17 00:00:00 2001 From: Jim Jagielski Date: Mon, 18 Feb 2013 20:06:30 +0000 Subject: [PATCH] mod_ldap was CVE-2012-3499 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1447454 13f79535-47bb-0310-9956-ffa450edef68 --- CHANGES | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGES b/CHANGES index 67fdc52d33..fc35685b0d 100644 --- a/CHANGES +++ b/CHANGES @@ -4,7 +4,7 @@ Changes with Apache 2.4.4 *) SECURITY: CVE-2012-3499 (cve.mitre.org) Various XSS flaws due to unescaped hostnames and URIs HTML output in - mod_info, mod_status, mod_impagemap, mod_proxy_balancer, and mod_proxy_ftp. + mod_info, mod_status, mod_impagemap, mod_ldap, and mod_proxy_ftp. [Jim Jagielski, Stefan Fritsch, Niels Heinen ] *) SECURITY: CVE-2012-4558 (cve.mitre.org) -- 2.50.1