httpd-stable-testers mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "William A. Rowe, Jr." <wr...@rowe-clan.net>
Subject [TEST] Apache 1.3.26 Release Candidate for Testing
Date Tue, 18 Jun 2002 19:27:04 GMT
The new Apache release is available for immediate testing.  Please reply-to
dev@httpd.apache.org with any observed variance between this version and
your previous experience with recent Apache 1.3.x releases.

The packages, until General Availability release within the next two hours
will be available from;

   http://httpd.apache.org/dev/dist/

.tar.gz and .tar.Z files are for Unix builds, -win32-src.zip file is for 
the Windows
builders [with cr/lf line endings.]  Win32 .exe and .msi installer packages are
online for testing as well.].

Excerpting tomorrow's announcement;

This version of Apache is principally a security and bug fix
release.  A summary of the bug fixes is given at the end of this document.
Of particular note is that 1.3.26 addresses and fixes the issues noted
in CAN-2002-0392 (mitre.org) [CERT VU#944335] regarding a vulnerability
in the handling of chunked transfer encoding.  We would like to thank
Mark Litchfield of ngssoftware.com for discovering and reporting the
vulnerability.


Mime
View raw message