sm-security AT lists.ibiblio.org
Subject: Security bugs are reported here via bugzilla
List archive
- From: Eric Sandall <eric AT sandall.us>
- To: sm-security AT lists.ibiblio.org
- Subject: [SM-Security] SECURITY UPDATE for http/apache2
- Date: Tue, 28 Sep 2004 14:27:02 -0700
Security update to fix the following vulnerability:
Fix merging of the Satisfy directive, which was applied to the surrounding
context and could allow access despite configured authentication. PR 31315.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0811
The following files are attached for spell http/apache2:
DETAILS
HISTORY
-sandalle
--
Eric Sandall | Source Mage GNU/Linux Developer
eric AT sandall.us PGP: 0xA8EFDD61 | http://www.sourcemage.org/
http://eric.sandall.us/ | SysAdmin @ Inst. Shock Physics @ WSU
http://counter.li.org/ #196285 | http://www.shock.wsu.edu/
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
Attachment:
apache2.tar.bz2
Description: application/bzip
-
[SM-Security] SECURITY UPDATE for http/apache2,
Eric Sandall, 09/16/2004
- <Possible follow-up(s)>
- [SM-Security] SECURITY UPDATE for http/apache2, Eric Sandall, 09/28/2004
Archive powered by MHonArc 2.6.24.