Return-Path: 
 <cvs-return-36992-apmail-httpd-cvs-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-cvs-archive@www.apache.org
Received: (qmail 41282 invoked from network); 6 Nov 2010 12:32:05 -0000
Received: from unknown (HELO mail.apache.org) (140.211.11.3)
  by 140.211.11.9 with SMTP; 6 Nov 2010 12:32:05 -0000
Received: (qmail 76662 invoked by uid 500); 6 Nov 2010 12:32:37 -0000
Delivered-To: apmail-httpd-cvs-archive@httpd.apache.org
Received: (qmail 76463 invoked by uid 500); 6 Nov 2010 12:32:34 -0000
Mailing-List: contact cvs-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
list-help: <mailto:cvs-help@httpd.apache.org>
list-unsubscribe: <mailto:cvs-unsubscribe@httpd.apache.org>
List-Post: <mailto:cvs@httpd.apache.org>
List-Id: <cvs.httpd.apache.org>
Delivered-To: mailing list cvs@httpd.apache.org
Received: (qmail 76456 invoked by uid 99); 6 Nov 2010 12:32:34 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 06 Nov 2010 12:32:34 +0000
X-ASF-Spam-Status: No, hits=-2000.0 required=10.0
	tests=ALL_TRUSTED
X-Spam-Check-By: apache.org
Received: from [140.211.11.4] (HELO eris.apache.org) (140.211.11.4)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 06 Nov 2010 12:32:33 +0000
Received: by eris.apache.org (Postfix, from userid 65534)
	id BD960238890B; Sat,  6 Nov 2010 12:31:19 +0000 (UTC)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Subject: svn commit: r1032023 - in /httpd/site/trunk/xdocs: download.xml
 mod_fcgid/index.en.xml
Date: Sat, 06 Nov 2010 12:31:19 -0000
To: cvs@httpd.apache.org
From: trawick@apache.org
X-Mailer: svnmailer-1.0.8
Message-Id: <20101106123119.BD960238890B@eris.apache.org>

Author: trawick
Date: Sat Nov  6 12:31:19 2010
New Revision: 1032023

URL: http://svn.apache.org/viewvc?rev=1032023&view=rev
Log:
mod_fcgid 2.3.6

Modified:
    httpd/site/trunk/xdocs/download.xml
    httpd/site/trunk/xdocs/mod_fcgid/index.en.xml

Modified: httpd/site/trunk/xdocs/download.xml
URL: http://svn.apache.org/viewvc/httpd/site/trunk/xdocs/download.xml?rev=1032023&r1=1032022&r2=1032023&view=diff
==============================================================================
--- httpd/site/trunk/xdocs/download.xml [utf-8] (original)
+++ httpd/site/trunk/xdocs/download.xml [utf-8] Sat Nov  6 12:31:19 2010
@@ -253,45 +253,60 @@ href="http://www.apache.org/dist/httpd/a
 
 </section>
 
-<section id="mod_fcgid" date="2010-01-27"><title>Apache mod_fcgid FastCGI module 
-for Apache HTTP Server released as 2.3.5</title>
+<section id="mod_fcgid" date="2010-11-06"><title>Apache mod_fcgid FastCGI module 
+for Apache HTTP Server released as 2.3.6</title>
 
-<p>The Apache HTTP Server Project is pleased to announce the release of Apache
-mod_fcgid version 2.3.5, a FastCGI module for Apache HTTP Server, for general
-availability.</p>
+<p>
+  The Apache Software Foundation and the Apache HTTP Server Project are
+  pleased to announce the release of version 2.3.6 of mod_fcgid, a
+  FastCGI implementation for Apache HTTP Server versions 2.0, 2.2, and 
+  future 2.4.  This version of mod_fcgid is a bug fix release.
+</p>
+
+<p>
+  A fix is included for CVE-2010-3872, a potential vulnerability which
+  can affect sites with untrusted FastCGI applications.
+</p>
+
+<p>
+  Additionally, default configuration settings for request body handling
+  have been changed to prevent large system resource use.  Administrators
+  of all versions of mod_fcgid are strongly cautioned to ensure that
+  FcgidMaxRequestLen is configured appropriately.
+</p>
 
 <p>For information about this module subproject, see the <a
 href="http://httpd.apache.org/mod_fcgid/">mod_fcgid module project page</a>.</p>
 
 <ul>
 <li>Unix Source as gzip with LF line endings: 
-<a href="[preferred]/httpd/mod_fcgid/mod_fcgid-2.3.5.tar.gz">mod_fcgid-2.3.5.tar.gz</a> 
-[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.5.tar.gz.asc">PGP</a>]
-[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.5.tar.gz.md5">MD5</a>]
-[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.5.tar.gz.sha1">SHA1</a>]
+<a href="[preferred]/httpd/mod_fcgid/mod_fcgid-2.3.6.tar.gz">mod_fcgid-2.3.6.tar.gz</a> 
+[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.6.tar.gz.asc">PGP</a>]
+[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.6.tar.gz.md5">MD5</a>]
+[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.6.tar.gz.sha1">SHA1</a>]
 </li>
 
 <li>Unix Source as bz2 with LF line endings: 
-<a href="[preferred]/httpd/mod_fcgid/mod_fcgid-2.3.5.tar.bz2">mod_fcgid-2.3.5.tar.bz2</a> 
-[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.5.tar.bz2.asc">PGP</a>]
-[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.5.tar.bz2.md5">MD5</a>]
-[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.5.tar.bz2.sha1">SHA1</a>]
+<a href="[preferred]/httpd/mod_fcgid/mod_fcgid-2.3.6.tar.bz2">mod_fcgid-2.3.6.tar.bz2</a> 
+[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.6.tar.bz2.asc">PGP</a>]
+[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.6.tar.bz2.md5">MD5</a>]
+[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.6.tar.bz2.sha1">SHA1</a>]
 </li>
 
 <li>Win32, Netware or OS/2 Source with CR/LF line endings: 
-<a href="[preferred]/httpd/mod_fcgid/mod_fcgid-2.3.5-crlf.zip"
-  >mod_fcgid-2.3.5-crlf.zip</a> 
-[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.5-crlf.zip.asc">PGP</a>]
-[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.5-crlf.zip.md5">MD5</a>]
-[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.5-crlf.zip.sha1">SHA1</a>]
+<a href="[preferred]/httpd/mod_fcgid/mod_fcgid-2.3.6-crlf.zip"
+  >mod_fcgid-2.3.6-crlf.zip</a> 
+[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.6-crlf.zip.asc">PGP</a>]
+[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.6-crlf.zip.md5">MD5</a>]
+[<a href="http://www.apache.org/dist/httpd/mod_fcgid/mod_fcgid-2.3.6-crlf.zip.sha1">SHA1</a>]
 </li>
 
 <li>Win32 binary build (unzip over the installed Apache 2.2 directory):
-<a href="[preferred]/httpd/binaries/win32/mod_fcgid-2.3.5-win32-x86.zip"
-  >mod_fcgid-2.3.5-win32-x86.zip</a> 
-[<a href="http://www.apache.org/dist/httpd/binaries/win32/mod_fcgid-2.3.5-win32-x86.zip.asc">PGP</a>]
-[<a href="http://www.apache.org/dist/httpd/binaries/win32/mod_fcgid-2.3.5-win32-x86.zip.sha1">SHA1</a>]
-[<a href="http://www.apache.org/dist/httpd/binaries/win32/mod_fcgid-2.3.5-win32-x86.zip.md5">MD5</a>]
+<a href="[preferred]/httpd/binaries/win32/mod_fcgid-2.3.6-win32-x86.zip"
+  >mod_fcgid-2.3.6-win32-x86.zip</a> 
+[<a href="http://www.apache.org/dist/httpd/binaries/win32/mod_fcgid-2.3.6-win32-x86.zip.asc">PGP</a>]
+[<a href="http://www.apache.org/dist/httpd/binaries/win32/mod_fcgid-2.3.6-win32-x86.zip.sha1">SHA1</a>]
+[<a href="http://www.apache.org/dist/httpd/binaries/win32/mod_fcgid-2.3.6-win32-x86.zip.md5">MD5</a>]
 </li>
 
 </ul>
@@ -379,7 +394,8 @@ using</p>
 <li>apache_1.3.42.tar.* are signed by Colm MacCárthaigh <code>F39B3750</code></li>
 <li>apache_*.msi are signed by William A Rowe Jr <code>B55D9977(7F7214A7)</code></li>
 <li>httpd-2.*-win32-src.zip are signed by William A. Rowe Jr. <code>B55D9977(7F7214A7)</code></li>
-<li>mod_fcgid-2.3.5.tar.* and mod_fcgid-2.3.5-crlf.zip are signed by Jeff Trawick <code>39FF092C</code></li>
+<li>mod_fcgid-2.3.6.tar.* and mod_fcgid-2.3.6-crlf.zip are signed by Jeff Trawick <code>39FF092C</code></li>
+<li>mod_fcgid-2.3.6-win32-x86.zip is signed by William A. Rowe Jr. <code>B55D9977(7F7214A7)</code></li>
 <li>mod_ftp-0.9.6-beta* are signed by William A. Rowe Jr. <code>B55D9977(7F7214A7)</code></li>
 </ul>
 

Modified: httpd/site/trunk/xdocs/mod_fcgid/index.en.xml
URL: http://svn.apache.org/viewvc/httpd/site/trunk/xdocs/mod_fcgid/index.en.xml?rev=1032023&r1=1032022&r2=1032023&view=diff
==============================================================================
--- httpd/site/trunk/xdocs/mod_fcgid/index.en.xml [utf-8] (original)
+++ httpd/site/trunk/xdocs/mod_fcgid/index.en.xml [utf-8] Sat Nov  6 12:31:19 2010
@@ -18,12 +18,30 @@
   </p>
 </section>
 
-<section>
-  <title>Get It!</title>
+<section date="2010-11-06">
+  <title>mod_fcgid 2.3.6 released</title>
+
+<p>
+  The Apache Software Foundation and the Apache HTTP Server Project are
+  pleased to announce the release of version 2.3.6 of mod_fcgid, a
+  FastCGI implementation for Apache HTTP Server versions 2.0, 2.2, and 
+  future 2.4.  This version of mod_fcgid is a bug fix release.
+</p>
+
+<p>
+  A fix is included for CVE-2010-3872, a potential vulnerability which
+  can affect sites with untrusted FastCGI applications.
+</p>
+
+<p>
+  Additionally, default configuration settings for request body handling
+  have been changed to prevent large system resource use.  Administrators
+  of all versions of mod_fcgid are strongly cautioned to ensure that
+  FcgidMaxRequestLen is configured appropriately.
+</p>
 
   <p>
-    <tt>mod_fcgid</tt> 2.3.5 is now released for general availability!
-    You can get the source from
+    You can get the source and Windows binaries from
     <a href="http://httpd.apache.org/download.cgi#mod_fcgid"
       >your local mirror</a>
   </p>