[SM-Security] SECURITY UPDATE for http/apache
Eric Sandall
eric at sandall.us
Fri Oct 29 13:02:16 EDT 2004
Security update to fix the following vulnerabilities:
* CAN-2004-0940 (cve.mitre.org)
Fix potential buffer overflow with escaped characters in SSI tag string.
* CAN-2004-0492 (cve.mitre.org)
Reject responses from a remote server if sent an invalid (negative)
Content-Length.
The following files are attached for spell http/apache:
BUILD
DETAILS
HISTORY
-sandalle
--
Eric Sandall | Source Mage GNU/Linux Developer
eric at sandall.us PGP: 0xA8EFDD61 | http://www.sourcemage.org/
http://eric.sandall.us/ | SysAdmin @ Inst. Shock Physics @ WSU
http://counter.li.org/ #196285 | http://www.shock.wsu.edu/
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: apache-1.3.33.tar.bz2
Type: application/octet-stream
Size: 2298 bytes
Desc: not available
Url : http://lists.ibiblio.org/pipermail/sm-security/attachments/20041029/7be61d5c/attachment.obj
More information about the SM-Security
mailing list