On 21/3/09 07:44, Torsten Foertsch wrote:
> Hi,
> 
> almost a month ago there was this posting on the users list
> 
>   http://www.gossamer-threads.com/lists/modperl/modperl/99170#99170
> 
> stating there was a security related bug in modperl.
> 
> Since then there were no svn updated touching the code. I'd like to know 
> if my servers are secure. So, where can I get more information about 
> the bug to perhaps help to fix it?

> Who knows more about the bug, please issue a statement if it is a bug or 
> not. If it is but nobody has the resources to fix it, please let me 
> know (privately) what it is. If I can I'll do it then.

AFAIK, the original submitter didn't follow up and explain what the potential
security problem was. He was told to contact secur...@apache.org, but I haven't
heard anything from them.

-- 
Philippe M. Chiasson     GPG: F9BFE0C2480E7680 1AE53631CB32A107 88C3A5A5
http://gozer.ectoplasm.org/       m/gozer\@(apache|cpan|ectoplasm)\.org/

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to