Re: [Security-Discuss] Apache mime-type bug fix

* Bob Puff <bob-6dd4Sf22++lWk0Htik3J/[email protected]> [2005-12-09 02:37:28 -0500]:

> One can only hope... This is a bug I reported a while back, looks like the
> apache folks finally fixed it.
> 
> http://issues.apache.org/bugzilla/show_bug.cgi?id=32812
> 
> Basically, its like this: apache, under certain circumstances, will not 
> give out
> the proper mime type for a file.  The certain circumstances seem to be 
> somewhat
> random, but one way that I've seen happen quite often is when using a squid
> proxy to view the page.
> 
> This definitely affects 10.0 and CS3.0, as I've seen the bug happen with 
> boxes
> running this.

10.0 won't be fixed; it's already EOL'd.  CS3 is possible, but you need
to file this in bugzilla so the apache maintainer can fix it.  This is a
bugfix issue rather than a security issue.

I've looked at the apache bugzilla and there, on quick glance, I don't
see a patch to fix it so we should let the apache maintainer investigate
this.

However, you can file a report on http://qa.mandriva.com against Corp3
to see if the apache maintainer will fix this.

-- 
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C  A2BC 2EBC 5E32 FEE3 0AD4}

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFDmbI4LrxeMv7jCtQRAouvAJ9N4jRLF2vIGg7rdVcyen3/6eZcwwCfZL7R
DkbReIDGws8dsRdN9Er2RTc=
=1Y8y
-----END PGP SIGNATURE-----

____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________