Security Related BUG within ModPerl 2.0.4

["Richard J. Brain" <ri...@procheckup.com>]

Dear Sirs,

I would like to report a security related bug within ModPerl 2.0.4, though prefer not to disclose the details to  a public channel.

The bug was found on a customer's Linux based system, and further confirmed on a test bed system which was set up running ModPerl 2.0.4 and Apache 2.2.8 both with the latest patches to confirm that it was not a configuration issue.

Please reply to me on a secure channel, and I will be more than happy to provide further details.

Best Regards,

Richard

Re: Security Related BUG within ModPerl 2.0.4

[Geoffrey Young <ge...@modperlcookbook.org>]

William A. Rowe, Jr. wrote:
>> I would like to report a security related bug within ModPerl 2.0.4,
>> though prefer not to disclose the details to  a public channel.
> 
> The appropriate secure channel for all ASF related security vulnerability
> reporting is the closed list, security@apache.org, which will be triaged
> to the appropriate committers or committee.

and thanks for treating a potential security vulnerability in a
thoughtful manner.

--Geoff

Re: Security Related BUG within ModPerl 2.0.4

["William A. Rowe, Jr." <wr...@rowe-clan.net>]

> I would like to report a security related bug within ModPerl 2.0.4, 
> though prefer not to disclose the details to  a public channel.

The appropriate secure channel for all ASF related security vulnerability
reporting is the closed list, security@apache.org, which will be triaged
to the appropriate committers or committee.