diff options
| author | William A. Rowe Jr <wrowe@apache.org> | 2013-06-26 15:23:40 +0000 |
|---|---|---|
| committer | William A. Rowe Jr <wrowe@apache.org> | 2013-06-26 15:23:40 +0000 |
| commit | bd7472686fb20d968a13c9be1268d4de13d9c112 (patch) | |
| tree | e6b573a37517ae42ec03b4d3b4eff0d06bbed35d | |
| parent | fa848fad94ab7f794d4eb1674347052cecf9b2f9 (diff) | |
| download | httpd-bd7472686fb20d968a13c9be1268d4de13d9c112.tar.gz | |
Clarify what I would support
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@1496963 13f79535-47bb-0310-9956-ffa450edef68
| -rw-r--r-- | STATUS | 4 |
1 files changed, 3 insertions, 1 deletions
@@ -186,7 +186,9 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK: +1: rjung -1: wrowe [it doesn't seem appropriate to add the alternate, less secure template to a branch which people shouldn't be deploying in - the first place. I'm +1 on the -SSLv2 change alone.] + the first place. I'm +1 on the -SSLv2 change alone, e.g. + http://people.apache.org/~wrowe/2.0-ssl-noV2.patch ] + * mod_rewrite: (CVE-2013-1862 (cve.mitre.org)) Ensure that client data written to the RewriteLog is escaped to prevent terminal escape sequences |