sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] SECURITY UPDATE for http/apache

From: Eric Sandall <eric AT sandall.us>
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] SECURITY UPDATE for http/apache
Date: Fri, 29 Oct 2004 10:02:16 -0700

Security update to fix the following vulnerabilities:
* CAN-2004-0940 (cve.mitre.org)
Fix potential buffer overflow with escaped characters in SSI tag string.
* CAN-2004-0492 (cve.mitre.org)
Reject responses from a remote server if sent an invalid (negative)
Content-Length.

The following files are attached for spell http/apache:
BUILD
DETAILS
HISTORY

-sandalle

--
Eric Sandall | Source Mage GNU/Linux Developer
eric AT sandall.us PGP: 0xA8EFDD61 | http://www.sourcemage.org/
http://eric.sandall.us/ | SysAdmin @ Inst. Shock Physics @ WSU
http://counter.li.org/ #196285 | http://www.shock.wsu.edu/

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Attachment: apache-1.3.33.tar.bz2
Description: Binary data

[SM-Security] SECURITY UPDATE for http/apache, Eric Sandall, 10/29/2004