Apache 1.3.27, Bug Fix and Security Updates

Triumph The Insult C writes "Apache 1.3.27 is out, addressing 3 security problems and includes some other updates. Check out cve.mitre.org for CAN-2002-0839, CAN-2002-0840 and CAN-2002-0843. You can grab .27 from the mirrors. Details on the security problems and the other updates to .27 can be found here."

Slow news day?

[bay43270]

A minor point release with some bug fixes (apparently too minor to even mention in the description). Neither Bill Gates or someone from the RIAA have taken away more of our rights today?

Re:Slow news day?

[Zocalo]

If it's that slow a news day, then we will shortly see another announcement to the effect that Apache v2.0.43 has been released as well. It fixes CAN-2002-0840 [mitre.org] which is the bug that was previously covered on Slashdot here [slashdot.org].

Apache Saying Matthew Murphy Was Irresponsible?

[Doug Dante]

CAN-2002-0839 ... We thank iDefense for their responsible notification and disclosure of this issue.

CAN-2002-0840 ... We thank Matthew Murphy for notification of this issue.

CAN-2002-0843 .... We thank David Wagner for the responsible notification and disclosure of this issue.

Re:Apache Saying Matthew Murphy Was Irresponsible?

[therealmoose]

Hey, if you invented a law like Murphy did that fscks up almost everthing, do you expect to be called responsible?

Re:Apache Saying Matthew Murphy Was Irresponsible?

[Hard_Code]

No, you expect to be called Finagle...

Also 2.0

[joyoflinux]

Apache 2.0.43 was released also, available here [apache.org], also.

Re:Also 2.0

[Anonymous Coward]

The three people who use it will be really grateful that you pointed that out :-)

mod_ssl and Apache-SSL

[roly]

here [modssl.org] is a copy of mod_ssl that works on 1.3.27 (remember, use --force), and for Apache-SSL I posted a patch to the Apache-SSL mailing list.

Re:mod_ssl and Apache-SSL

[Evro]

Also in that directory:

-rw-r--r-- 1 modssl modssl 753416 Oct 4 13:53 mod_ssl-2.8.11-1.3.27.tar.gz [modssl.org]
-rw-r--r-- 1 modssl modssl 286 Oct 4 13:53 mod_ssl-2.8.11-1.3.27.tar.gz.asc [modssl.org]

Kudos and thanks!

[Locke!Erasmus]

Thanks for fixing those bugs, guys!

Is there perhaps any way you can fix my internet explorer next?

Re:Kudos and thanks!

[nirvdrum]

Installing a replacement browser does not fix another's deficiencies. What is your solution for Mozilla's deficiencies? Opera?

ap4c|-|3

[cybermace5]

OMG when d0 w3 g3t$ teh ap4c|-|3 1.3.37??!1!!11oneoneone11!

[Disclaimer: tough week, please beat me gently]

Apache Cocoon

[avev1]

Does anyone have any knowledge on Apache Cocoon? I need to use japanese/chinese fonts for an xml to PDF conversion and am unable to determine if there are any solutions. Additionally can anyone recommend a good xslt editor for use with this, perhaps cheap or even open source?