[Full-disclosure] Re: [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released

[Steve VanDevender <stevev@xxxxxxxxxxxxxxxxxxxxxxx>]

Philip M. Gollucci writes:
 > William A. Rowe, Jr. wrote:
 > >                     Apache HTTP Server 2.2.3 Released
 > > 
 > > The Apache Software Foundation and The Apache HTTP Server Project are
 > > pleased to announce the release of version 2.2.3 of the Apache HTTP Server
 > > ("Apache").
 > > 
 > > This version of Apache is principally a bug and security fix release. The
 > > following potential security flaws are addressed;
 > > 
 > >    CVE-2006-3747: An off-by-one flaw exists in the Rewrite module,
 > >    mod_rewrite, as shipped with Apache 1.3 since 1.3.28, 2.0 since 2.0.46,
 > >    and 2.2 since 2.2.0.
 > Is a release in the 2.0.x (2.0.59) soon to follow ?

Both 2.0.59 and 1.3.37 have been out for at least a couple of days now,
both including the mod_rewrite fix.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/