Return-Path: Delivered-To: apmail-httpd-dev-archive@www.apache.org Received: (qmail 41042 invoked from network); 8 Jan 2010 17:42:26 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 8 Jan 2010 17:42:26 -0000 Received: (qmail 48164 invoked by uid 500); 8 Jan 2010 17:42:25 -0000 Delivered-To: apmail-httpd-dev-archive@httpd.apache.org Received: (qmail 48061 invoked by uid 500); 8 Jan 2010 17:42:25 -0000 Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list dev@httpd.apache.org Received: (qmail 48052 invoked by uid 99); 8 Jan 2010 17:42:25 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 08 Jan 2010 17:42:25 +0000 X-ASF-Spam-Status: No, hits=0.2 required=10.0 tests=RCVD_IN_DNSWL_LOW,SPF_HELO_PASS,SPF_NEUTRAL X-Spam-Check-By: apache.org Received-SPF: neutral (nike.apache.org: local policy) Received: from [207.106.84.159] (HELO atlas.jtan.com) (207.106.84.159) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 08 Jan 2010 17:42:14 +0000 X-JTAN-Outgoing-From: sctemme@apache.org X-JTAN-Outgoing-To: X-JTAN-Received: c-67-169-107-71.hsd1.ca.comcast.net [67.169.107.71] X-JTAN-Recipient: X-JTAN-AntiSPAM: not spam, Outgoing not scanned X-JTAN-AntiVirus: Found to be clean, Outgoing not scanned Received: from [10.11.0.108] (c-67-169-107-71.hsd1.ca.comcast.net [67.169.107.71]) (authenticated bits=0) by atlas.jtan.com (8.12.8p1/8.12.8) with ESMTP id o08HfpGS001088 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT) for ; Fri, 8 Jan 2010 17:41:52 GMT From: Sander Temme Mime-Version: 1.0 (Apple Message framework v1077) Content-Type: multipart/signed; boundary=Apple-Mail-18--950014563; protocol="application/pkcs7-signature"; micalg=sha1 Subject: Re: [VOTE] 1.3.42 release candidate Date: Fri, 8 Jan 2010 09:41:50 -0800 In-Reply-To: <6f5b6fe71001080429i64c10db8n797e1cb4c71354b6@mail.gmail.com> To: dev@httpd.apache.org References: <6f5b6fe71001080429i64c10db8n797e1cb4c71354b6@mail.gmail.com> Message-Id: <27F87F38-D316-4D28-88D8-6AAA0A56AA10@apache.org> X-Mailer: Apple Mail (2.1077) X-Virus-Checked: Checked by ClamAV on apache.org --Apple-Mail-18--950014563 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=iso-8859-1 On Jan 8, 2010, at 4:29 AM, Colm MacC=E1rthaigh wrote: > There is a 1.3.42 release candidate for testing, and voting, at; >=20 > http://people.apache.org/~colm/1.3.42/ Not seeing gpg sigs or md5s on the tarballs. Didn't we used to do that = back then?=20 S. > As per the changes, there are two updates; >=20 > *) SECURITY: CVE-2010-0010 (cve.mitre.org) > mod_proxy: Prevent chunk-size integer overflow on platforms > where sizeof(int) < sizeof(long). Reported by Adam Zabrocki. > [Colm MacC=E1rthaigh >=20 > *) Protect logresolve from mismanaged DNS records that return > blank/null hostnames. [Jim Jagielski] >=20 > Notes; >=20 > this is intended as the final release of Apache httpd 1.3, which has > reached end of life. Security updates may continue to be provided by > another means (see the CHANGES file for details). >=20 > Apache httpd 1.3's "./configure" script does not work with some > versions of "dash". Please change the hash-bang line to execute a > bourne-compatible shell, such as "/bin/bash" on platforms affected. >=20 > Many thanks in advance for your help and testing. >=20 > --=20 > Colm >=20 >=20 --=20 Sander Temme sctemme@apache.org PGP FP: 51B4 8727 466A 0BC3 69F4 B7B8 B2BE BC40 1529 24AF --Apple-Mail-18--950014563 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIFMzCCBS8w ggMXoAMCAQICAwVx1DANBgkqhkiG9w0BAQUFADB5MRAwDgYDVQQKEwdSb290IENBMR4wHAYDVQQL ExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQgU2lnbmluZyBBdXRob3Jp dHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAY2FjZXJ0Lm9yZzAeFw0wODA3MDYxNTQzMzRaFw0x MDA3MDYxNTQzMzRaMDoxFTATBgNVBAMTDFNhbmRlciBUZW1tZTEhMB8GCSqGSIb3DQEJARYSc2N0 ZW1tZUBhcGFjaGUub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKsWFApS17cR 51oTARVEphn9w7VKL2p+HqnTJOF7CnihobEp4um9w3c0bcbXruKbjfwzBiaRAv0BGkOezB8XuHpQ r3abklf7bkvFqYHLaj9ANm2wj2qrUXasaPgsOIXNiPa0qkpxBHk8Of43Q/Jxv4YGF11DvTfXPpbl qXkJ07pk6fC3MSDAsZc5mdGtIhDY/LGgxr/A6NhwTG3hxwE9zPt/B7v/bctU4ZWxloeC/eCpCYUU fk3BGwoU53iEXyMpe/Kz2iIyZe5dimDeOigqC3Cye99EvtjL2ZavRsqL00j5M9q/MPYh1WsgVOaZ WxpEnnd+e5kPTjTL7hAbJzv7cwIDAQABo4H+MIH7MAwGA1UdEwEB/wQCMAAwVgYJYIZIAYb4QgEN BEkWR1RvIGdldCB5b3VyIG93biBjZXJ0aWZpY2F0ZSBmb3IgRlJFRSBoZWFkIG92ZXIgdG8gaHR0 cDovL3d3dy5DQWNlcnQub3JnMEAGA1UdJQQ5MDcGCCsGAQUFBwMEBggrBgEFBQcDAgYKKwYBBAGC NwoDBAYKKwYBBAGCNwoDAwYJYIZIAYb4QgQBMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcwAYYW aHR0cDovL29jc3AuY2FjZXJ0Lm9yZzAdBgNVHREEFjAUgRJzY3RlbW1lQGFwYWNoZS5vcmcwDQYJ KoZIhvcNAQEFBQADggIBAITHPZWMXBXh1rSeQ9yJoMBXr0b5bOxUX3V/KsgYLCTu5d0GNB2HHjcq dHSxbIm7ezIGxTFA491q9wOHQZmYvQzMV2zQUqLrZmNFYPCC1/Q5Gw43CnYQ0StGX2frOKNIp7fM KpXux9jjao8sG1Sa0ubclAx3u50wz3k9mEfFhtrZsYLWbruitZeozslMJhG8tFoRH7J68QmhnyCK GniNLSu4K6SykM5DOH3GzDKsbjiPqQ7Y+h8qj309oO81fAWo6JdcVdxivFS7KgHAt+nQS1oaiSeV W25idOBsTiwWBxkcfq3DltK0HZe6QWMYYvgq2BoHAwGGy+wHjEk8dc/rtf4HAnpee/3Quc3lN+IK UHYC2RlgtG2JirizdUhkxdsaw6Vl+yk3FvduWJUZjEh7zBMKRUoSOlo6i8ApCNSgHk1QQSI2wPqs gltpxhQ8B3wCdUNbywntZVyaNp5CgmkBxOs330nkl+jQsZvE5XmYyZt20W6SuCaV1YYHHducXdc/ DNUrSdsdw2nNmVOqZ3xC53UXX/tuPquLqLbSs2W1vtbCAsdzTalNbqG64OrG74I2C191RM05l2jp AHfoz+9OZ+7q2pSGYdbACxY3Rke2s7jqPD/X9aukO50ZDibLEGW8wdL+0yxZLGaR2zJ9K8yo4YuO 09oUHORRtY0WoMRX0FFTMYIDMzCCAy8CAQEwgYAweTEQMA4GA1UEChMHUm9vdCBDQTEeMBwGA1UE CxMVaHR0cDovL3d3dy5jYWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0IFNpZ25pbmcgQXV0aG9y aXR5MSEwHwYJKoZIhvcNAQkBFhJzdXBwb3J0QGNhY2VydC5vcmcCAwVx1DAJBgUrDgMCGgUAoIIB hzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xMDAxMDgxNzQxNTBa MCMGCSqGSIb3DQEJBDEWBBTLaPUxIvUYisaXqfPR9LT0htiL9jCBkQYJKwYBBAGCNxAEMYGDMIGA MHkxEDAOBgNVBAoTB1Jvb3QgQ0ExHjAcBgNVBAsTFWh0dHA6Ly93d3cuY2FjZXJ0Lm9yZzEiMCAG A1UEAxMZQ0EgQ2VydCBTaWduaW5nIEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJARYSc3VwcG9ydEBj YWNlcnQub3JnAgMFcdQwgZMGCyqGSIb3DQEJEAILMYGDoIGAMHkxEDAOBgNVBAoTB1Jvb3QgQ0Ex HjAcBgNVBAsTFWh0dHA6Ly93d3cuY2FjZXJ0Lm9yZzEiMCAGA1UEAxMZQ0EgQ2VydCBTaWduaW5n IEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJARYSc3VwcG9ydEBjYWNlcnQub3JnAgMFcdQwDQYJKoZI hvcNAQEBBQAEggEAG9MYGdSFtvsJbqu4D6kW6gtw4dPWox5tykJXh07/jlms6akUxiQDjbiF5LwQ 0yMCdftead6JrqZJxpZx9zqAHRut3hCcyO0YixaV6NF7XNB0A6vi+i1sSQgQI3x/y4U+a9M18AmT bWSc+eNlXtD9vYRs+8pr72N7/Dsv/h3mbq7/RO9qwl3VFdAH+8MUvov9uBJT4zVsSnDBvlsxcbRA FtkGhY4V6yAxbfirIE+TMcixOizo3gT3nULR8vyV8CsdZzmG3xzUdw1Ty4sJ1xYwEM74U12oeMtY jEShZo3yT7lakwF+gVl1+2v067x3DA0XHNFj7lJavIyHfxG6VkqCnAAAAAAAAA== --Apple-Mail-18--950014563--