Return-Path: X-Original-To: apmail-httpd-dev-archive@www.apache.org Delivered-To: apmail-httpd-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 27CA610475 for ; Thu, 9 Jan 2014 05:22:49 +0000 (UTC) Received: (qmail 84457 invoked by uid 500); 9 Jan 2014 05:22:28 -0000 Delivered-To: apmail-httpd-dev-archive@httpd.apache.org Received: (qmail 84172 invoked by uid 500); 9 Jan 2014 05:22:09 -0000 Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list dev@httpd.apache.org Received: (qmail 83995 invoked by uid 99); 9 Jan 2014 05:22:00 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 09 Jan 2014 05:22:00 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=5.0 tests=SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of ben@reser.org designates 50.197.89.41 as permitted sender) Received: from [50.197.89.41] (HELO mail.brain.org) (50.197.89.41) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 09 Jan 2014 05:21:53 +0000 Received: from localhost (localhost [127.0.0.1]) by mail.brain.org (Postfix) with ESMTP id B8EC1179E11C for ; Wed, 8 Jan 2014 21:21:32 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at fornix.brain.org Received: from mail.brain.org ([127.0.0.1]) by localhost (fornix.brain.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h1kWTcT5PUDO for ; Wed, 8 Jan 2014 21:21:32 -0800 (PST) Received: from fmri.brain.org (fmri.brain.org [IPv6:2001:470:e966:5:223:dfff:fedf:433d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.brain.org (Postfix) with ESMTPSA id 81AE0179E111 for ; Wed, 8 Jan 2014 21:21:32 -0800 (PST) Message-ID: <52CE3209.2010806@reser.org> Date: Wed, 08 Jan 2014 21:22:17 -0800 From: Ben Reser User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:27.0) Gecko/20100101 Thunderbird/27.0 MIME-Version: 1.0 To: dev@httpd.apache.org Subject: Security Advisories X-Enigmail-Version: 1.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org So I've received at least two people asking me for more details about CVE-2013-1896. I thinking it might be better to provide more than a couple sentences on the issues. It can be hard to understand the impact of an issue from what we're providing now.