You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@httpd.apache.org by Rainer Jung <ra...@kippdata.de> on 2013/06/05 18:00:27 UTC

CVE-2011-4317 fix for 2.0.x

To me it seems, that with r1489910 CVE-2011-4317 should be fixed.

There's some investigation by trawick in the STATUS file for 2.0 left
over after that commit. I think that all of his observations and
recommendations should be taken care of by the above commit, but it
would be good to double check.

Jeff: can you check your test cases against latest 2.0 HEAD?

Regards,

Rainer

Re: CVE-2011-4317 fix for 2.0.x

Posted by Shahid khan <sl...@gmail.com>.

On Jun 5, 2013 9:30 PM, "Rainer Jung" <ra...@kippdata.de> wrote:
>
> To me it seems, that with r1489910 CVE-2011-4317 should be fixed.
>
> There's some investigation by trawick in the STATUS file for 2.0 left
> over after that commit. I think that all of his observations and
> recommendations should be taken care of by the above commit, but it
> would be good to double check.
>
> Jeff: can you check your test cases against latest 2.0 HEAD?
>
> Regards,
>
> Rainer