You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Matthew Tice <mj...@gmail.com> on 2008/02/06 23:47:36 UTC

[users@httpd] upgrade mod_rewrite

Hello all,

I'm currently using apache 1.3.33.  Because of some auditing concerns I was
told I need to upgrade mod_rewrite.  Problem is that I really don't know
what that entails.  I'm not sure how to determine what version I'm using (if
it's not tied to apache 1.3).  Do I need to upgrade my apache installation
to apache2?  Any help is greatly appreciated.

Matt

Re: [users@httpd] upgrade mod_rewrite

Posted by Matthew Tice <mj...@gmail.com>.
>
>
> mod_rewrite is versioned with apache, and the only (supported) way to
> upgrade it is to upgrade apache.
>
> What, exactly, is the reported problem? I'm guessing it is
> CVE-2006-3747, in which case it can be fixed by moving to 1.3.37 or
> higher. (But going to 2.2 is not a bad idea, in general.)
>
> Joshua.
>


Yup, that's exactly the problem.  Thanks for the info Joshua.

Matt

Re: [users@httpd] upgrade mod_rewrite

Posted by Joshua Slive <jo...@slive.ca>.
On Feb 6, 2008 5:47 PM, Matthew Tice <mj...@gmail.com> wrote:
> Hello all,
>
> I'm currently using apache 1.3.33.  Because of some auditing concerns I was
> told I need to upgrade mod_rewrite.  Problem is that I really don't know
> what that entails.  I'm not sure how to determine what version I'm using (if
> it's not tied to apache 1.3).  Do I need to upgrade my apache installation
> to apache2?  Any help is greatly appreciated.

mod_rewrite is versioned with apache, and the only (supported) way to
upgrade it is to upgrade apache.

What, exactly, is the reported problem? I'm guessing it is
CVE-2006-3747, in which case it can be fixed by moving to 1.3.37 or
higher. (But going to 2.2 is not a bad idea, in general.)

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org