httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Paul J. Reder" <rede...@remulak.net>
Subject Re: [TEST] Apache 1.3.26 Release Candidate for Testing
Date Tue, 18 Jun 2002 19:47:47 GMT
I have just finished testing 1.3.26 on AIX and it looks good to me.

William A. Rowe, Jr. wrote:

> The new Apache release is available for immediate testing.  Please reply-to
> dev@httpd.apache.org with any observed variance between this version and
> your previous experience with recent Apache 1.3.x releases.
> 
> The packages, until General Availability release within the next two hours
> will be available from;
> 
>   http://httpd.apache.org/dev/dist/
> 
> .tar.gz and .tar.Z files are for Unix builds, -win32-src.zip file is for 
> the Windows
> builders [with cr/lf line endings.]  Win32 .exe and .msi installer 
> packages are
> online for testing as well.].
> 
> Excerpting tomorrow's announcement;
> 
> This version of Apache is principally a security and bug fix
> release.  A summary of the bug fixes is given at the end of this document.
> Of particular note is that 1.3.26 addresses and fixes the issues noted
> in CAN-2002-0392 (mitre.org) [CERT VU#944335] regarding a vulnerability
> in the handling of chunked transfer encoding.  We would like to thank
> Mark Litchfield of ngssoftware.com for discovering and reporting the
> vulnerability.
> 
> 


-- 
Paul J. Reder
-----------------------------------------------------------
"The strength of the Constitution lies entirely in the determination of each
citizen to defend it.  Only if every single citizen feels duty bound to do
his share in this defense are the constitutional rights secure."
-- Albert Einstein



Mime
View raw message