Apache 1.0.5 (maintenance release)

[Brian Behlendorf <br...@hyperreal.com>]

Two holes had been uncovered in recent days by the CIAC relating to the 
escaping of unsafe shell characters from the files "cgi-src/util.c" and 
"src/util.c".  This release of Apache fixes that problem.  1.0.4 was 
inadvertantly released with only one of the two holes patched, so 1.0.5 
followed up approximately 5 hours later.

There have been no reports of any exploitation of this hole, which also 
existed in NCSA 1.5 and is fixed in 1.5.1.  However, it is recommended 
that you either patch the holes (patches provided as an attachment) or 
upgrade to 1.0.5.

The Apache members have been busily working on 1.1 - a beta should be 
available very soon.

	Brian