You are viewing a plain text version of this content. The canonical link for it is here.

Posted to modperl@perl.apache.org by Gerald Richter <ri...@ecos.de> on 2005/11/15 06:30:50 UTC

ANNOUNCE: Apache-SessionX-2.01

The URL

    ftp://ftp.dev.ecos.de/pub/perl/session/Apache-SessionX-2.01.tar.gz

has entered CPAN as

  file: $CPAN/authors/id/G/GR/GRICHTER/Apache-SessionX-2.01.tar.gz
  size: 12298 bytes
   md5: c64ebed0b4181bb5b65b127491ccd47b

This release fixes a security problem during validation of session_id, which
might have caused Apache::SessionX to accpet invalid session id's.

If you are using Apache::SessionX it's recommended to update your
installation.


Gerald


---------------------------------------------------------------------------
Gerald Richter            ecos electronic communication services gmbh
IT-Securitylösungen * Webapplikationen mit Apache/Perl/mod_perl/Embperl

Post:       Tulpenstrasse 5          D-55276 Dienheim b. Mainz
E-Mail:     richter@ecos.de          Voice:   +49 6133 939-122
WWW:        http://www.ecos.de/      Fax:     +49 6133 939-333
---------------------------------------------------------------------------
ECOS BB-5000 Firewall- und IT-Security Appliance: www.bb-5000.info
---------------------------------------------------------------------------

 


 
** Virus checked by BB-5000 Mailfilter **