Post, Mark K wrote: > The Apache web site http://httpd.apache.org/ has two announcements on it, > one each for the 1.3 and 2.0 series. These new versions correct the > vulnerability reported yesterday in CAN-2002-0392 (mitre.org) and CERT > VU#944335. As of yet, only source versions are available. Binaries will > soon follow. If you have a support contract with your Linux/390 provider, > watch for their updates, since it would be a good idea to install them as > soon as they become available. > > Mark Post
We at RedHat have already released the fixed version for all other archs. Unfortunately the s390 version is still pending in QA but should be available in the next few days. For anyone who can't wait you can use the SRPM from the i386 release for 7.2 and rebuild it. Step by step guide: ncftpget ftp://ftp.redhat.com/pub/redhat/linux/updates/7.2/en/os/SRPMS/apache-1.3.22-6.src.rpm rpmbuild --rebuild apache-1.3.22-6.src.rpm rpm -Fvh /usr/src/redhat/RPMS/s390/apache* Should do the job. Read ya, Phil -- Philipp Knirsch | Tel.: +49-711-96437-470 Development | Fax.: +49-711-96437-111 Red Hat GmbH | Email: Phil Knirsch <[EMAIL PROTECTED]> Hauptstaetterstr. 58 | Web: http://www.redhat.de/ D-70178 Stuttgart | Fear can hold you prisoner, hope can set you free.
