[ANNOUNCE] mod_ssl 2.8.19 for Apache 1.3.31
"Ralf S. Engelschall" <[email protected]>
| Newsgroups | gmane.comp.apache.mod-ssl.announce,gmane.comp.apache.mod-ssl.user |
|---|---|
| Organization | Engelschall, Germany. |
| Message-ID | <[email protected]> |
We've today found an ssl_log() related format string vulnerability in
the mod_proxy hook functions of mod_ssl for Apache 1.3.x (mod_ssl for
Apache 2.x is not affected). A mod_ssl 2.8.19 for Apache 1.3.31 was
created which fixes this potential security hole.
Get mod_ssl-2.8.19-1.3.31.tar.gz from:
o http://www.modssl.org/source/
o ftp://ftp.modssl.org/source/
Yours,
Ralf S. Engelschall
[email protected]
www.engelschall.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
Official Announcement Mailing List [email protected]
Automated List Manager [email protected]