You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by jw...@apache.org on 2002/06/21 07:48:15 UTC
cvs commit: httpd-site/xdocs/info security_bulletin_20020617.txt security_bulletin_20020620.txt
jwoolley 2002/06/20 22:48:15
Modified: docs/info security_bulletin_20020617.txt
security_bulletin_20020620.txt
xdocs/info security_bulletin_20020617.txt
security_bulletin_20020620.txt
Log:
these should have been PGP signed. oops.
Revision Changes Path
1.7 +16 -2 httpd-site/docs/info/security_bulletin_20020617.txt
Index: security_bulletin_20020617.txt
===================================================================
RCS file: /home/cvs/httpd-site/docs/info/security_bulletin_20020617.txt,v
retrieving revision 1.6
retrieving revision 1.7
diff -u -d -u -r1.6 -r1.7
--- security_bulletin_20020617.txt 21 Jun 2002 03:54:00 -0000 1.6
+++ security_bulletin_20020617.txt 21 Jun 2002 05:48:15 -0000 1.7
@@ -1,8 +1,10 @@
+-----BEGIN PGP SIGNED MESSAGE-----
----------------------------------------------------------------
+
+- ---------------------------------------------------------------
THIS DOCUMENT IS SUPERSEDED BY ASF BULLETIN 20020620
See http://httpd.apache.org/info/security_bulletin_20020620.txt
----------------------------------------------------------------
+- ---------------------------------------------------------------
Date: June 17, 2002
Last Updated: June 18, 2002, 14:21 (-0400)
@@ -66,3 +68,15 @@
Users of Apache 1.3 should upgrade to 1.3.26, and users of Apache 2.0
should upgrade to 2.0.39, which contain a fix for this issue.
+
+-----BEGIN PGP SIGNATURE-----
+Version: PGP 6.5.8
+
+iQEVAwUBPRK9xtc6kLhrup1dAQGwMgf+I6+RMNXdjO1fQWT5nui4NhWcjZ4jPSwJ
+D4/geaY0EvffTw4FENogKVNimeqMeEKWVnLrMlqRyDmokVliszhva9Mbjy0PWgZ2
+YNjFUEzHckGB49Ex3KRnSwg6A0ife5OWKTEdyRBCfP7PPowsa53OTbz6wxMA8+dK
+5l5zr/XNOoPFtaEB8/dGqaYDrpkcjrcJAUYhGfRm2vB8UJXpilxYq5ATtSLaTKGS
+JRlfObSdMlfCeWZk2dk7j6bpczulVriE6xvUHUiMxSCy+XbOcgZyNeSUmqYEpvZm
+/tmsCQ9RAA72w+lIZQ0JIr1p7spaNOSPdIwM4iHcbEcubLdDEmH/xg==
+=H4Cy
+-----END PGP SIGNATURE-----
1.2 +17 -3 httpd-site/docs/info/security_bulletin_20020620.txt
Index: security_bulletin_20020620.txt
===================================================================
RCS file: /home/cvs/httpd-site/docs/info/security_bulletin_20020620.txt,v
retrieving revision 1.1
retrieving revision 1.2
diff -u -d -u -r1.1 -r1.2
--- security_bulletin_20020620.txt 21 Jun 2002 03:54:00 -0000 1.1
+++ security_bulletin_20020620.txt 21 Jun 2002 05:48:15 -0000 1.2
@@ -1,3 +1,5 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+
SUPERSEDES: http://httpd.apache.org/info/security_bulletin_20020617.txt
@@ -8,9 +10,9 @@
CAN-2002-0392 (mitre.org) [CERT VU#944335]
-----------------------------------------------------------
+- ----------------------------------------------------------
------------UPDATED ADVISORY------------
-----------------------------------------------------------
+- ----------------------------------------------------------
Introduction:
While testing for Oracle vulnerabilities, Mark Litchfield discovered a
@@ -45,7 +47,7 @@
vulnerability in our software reports it to security@apache.org.
-----------------------------------------------------------
+- ----------------------------------------------------------
Full Description:
Versions of the Apache web server up to and including 1.3.24 and 2.0
@@ -83,3 +85,15 @@
that occurs within Apache. We have been made aware that Apache 1.3 on
Windows is exploitable in a similar way as well.
+
+-----BEGIN PGP SIGNATURE-----
+Version: PGP 6.5.8
+
+iQEVAwUBPRK8ztc6kLhrup1dAQEfzQf+NbNSVtg+nrcipH2DEnsLCbd0odjwHAZM
+gBpJPShl5D+AFhxu3gNiMkOtnQs+LkyCQinYJErVNXUzK5das9VyBdtGswsXsKs0
+N/stacgdMg8fxenyK0CDhlUl3QLaVSit08Hwads0yYbeIEAKoLx/n7AvGr2CvDnh
+fStxMvaiJgqadeq3udRSyy1UMl+hrxy2xMGZ3ducPMi5Bt/riZh+NJuEKazHosDY
+98wEvGQWPMWoYOWxI1Y45slu+QVrkbrgnkKvMDT6WHBDzD/we3I6ulHjoaBjMEF0
+7m2bEBFL902SE4UDf1n2DxLFZHR8VMSFwUhqkPRNLxVbV42yxJwa2Q==
+=vV/N
+-----END PGP SIGNATURE-----
1.7 +16 -2 httpd-site/xdocs/info/security_bulletin_20020617.txt
Index: security_bulletin_20020617.txt
===================================================================
RCS file: /home/cvs/httpd-site/xdocs/info/security_bulletin_20020617.txt,v
retrieving revision 1.6
retrieving revision 1.7
diff -u -d -u -r1.6 -r1.7
--- security_bulletin_20020617.txt 21 Jun 2002 03:54:00 -0000 1.6
+++ security_bulletin_20020617.txt 21 Jun 2002 05:48:15 -0000 1.7
@@ -1,8 +1,10 @@
+-----BEGIN PGP SIGNED MESSAGE-----
----------------------------------------------------------------
+
+- ---------------------------------------------------------------
THIS DOCUMENT IS SUPERSEDED BY ASF BULLETIN 20020620
See http://httpd.apache.org/info/security_bulletin_20020620.txt
----------------------------------------------------------------
+- ---------------------------------------------------------------
Date: June 17, 2002
Last Updated: June 18, 2002, 14:21 (-0400)
@@ -66,3 +68,15 @@
Users of Apache 1.3 should upgrade to 1.3.26, and users of Apache 2.0
should upgrade to 2.0.39, which contain a fix for this issue.
+
+-----BEGIN PGP SIGNATURE-----
+Version: PGP 6.5.8
+
+iQEVAwUBPRK9xtc6kLhrup1dAQGwMgf+I6+RMNXdjO1fQWT5nui4NhWcjZ4jPSwJ
+D4/geaY0EvffTw4FENogKVNimeqMeEKWVnLrMlqRyDmokVliszhva9Mbjy0PWgZ2
+YNjFUEzHckGB49Ex3KRnSwg6A0ife5OWKTEdyRBCfP7PPowsa53OTbz6wxMA8+dK
+5l5zr/XNOoPFtaEB8/dGqaYDrpkcjrcJAUYhGfRm2vB8UJXpilxYq5ATtSLaTKGS
+JRlfObSdMlfCeWZk2dk7j6bpczulVriE6xvUHUiMxSCy+XbOcgZyNeSUmqYEpvZm
+/tmsCQ9RAA72w+lIZQ0JIr1p7spaNOSPdIwM4iHcbEcubLdDEmH/xg==
+=H4Cy
+-----END PGP SIGNATURE-----
1.2 +17 -3 httpd-site/xdocs/info/security_bulletin_20020620.txt
Index: security_bulletin_20020620.txt
===================================================================
RCS file: /home/cvs/httpd-site/xdocs/info/security_bulletin_20020620.txt,v
retrieving revision 1.1
retrieving revision 1.2
diff -u -d -u -r1.1 -r1.2
--- security_bulletin_20020620.txt 21 Jun 2002 03:54:00 -0000 1.1
+++ security_bulletin_20020620.txt 21 Jun 2002 05:48:15 -0000 1.2
@@ -1,3 +1,5 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+
SUPERSEDES: http://httpd.apache.org/info/security_bulletin_20020617.txt
@@ -8,9 +10,9 @@
CAN-2002-0392 (mitre.org) [CERT VU#944335]
-----------------------------------------------------------
+- ----------------------------------------------------------
------------UPDATED ADVISORY------------
-----------------------------------------------------------
+- ----------------------------------------------------------
Introduction:
While testing for Oracle vulnerabilities, Mark Litchfield discovered a
@@ -45,7 +47,7 @@
vulnerability in our software reports it to security@apache.org.
-----------------------------------------------------------
+- ----------------------------------------------------------
Full Description:
Versions of the Apache web server up to and including 1.3.24 and 2.0
@@ -83,3 +85,15 @@
that occurs within Apache. We have been made aware that Apache 1.3 on
Windows is exploitable in a similar way as well.
+
+-----BEGIN PGP SIGNATURE-----
+Version: PGP 6.5.8
+
+iQEVAwUBPRK8ztc6kLhrup1dAQEfzQf+NbNSVtg+nrcipH2DEnsLCbd0odjwHAZM
+gBpJPShl5D+AFhxu3gNiMkOtnQs+LkyCQinYJErVNXUzK5das9VyBdtGswsXsKs0
+N/stacgdMg8fxenyK0CDhlUl3QLaVSit08Hwads0yYbeIEAKoLx/n7AvGr2CvDnh
+fStxMvaiJgqadeq3udRSyy1UMl+hrxy2xMGZ3ducPMi5Bt/riZh+NJuEKazHosDY
+98wEvGQWPMWoYOWxI1Y45slu+QVrkbrgnkKvMDT6WHBDzD/we3I6ulHjoaBjMEF0
+7m2bEBFL902SE4UDf1n2DxLFZHR8VMSFwUhqkPRNLxVbV42yxJwa2Q==
+=vV/N
+-----END PGP SIGNATURE-----