Updating 2.4 security page

2012-08-21 Thread Rainer Jung
Now that 2.4.3 is released and annouced I'm in the process of updating the security page (the xml file with the known vulnerabilities) to include the two issues that are in CHANGES. The XSS mod_negotitation issues I think is clearly of severity level 4 (low), but I'm a bit uncertain about the

Re: Updating 2.4 security page

2012-08-21 Thread Jeff Trawick
On Tue, Aug 21, 2012 at 11:30 AM, Rainer Jung rainer.j...@kippdata.de wrote: Now that 2.4.3 is released and annouced I'm in the process of updating the security page (the xml file with the known vulnerabilities) to include the two issues that are in CHANGES. The XSS mod_negotitation issues I

RE: Updating 2.4 security page

2012-08-21 Thread Plüm , Rüdiger , Vodafone Group
-Original Message- From: Jeff Trawick [mailto:] Sent: Dienstag, 21. August 2012 17:37 To: dev@httpd.apache.org Subject: Re: Updating 2.4 security page On Tue, Aug 21, 2012 at 11:30 AM, Rainer Jung wrote: Now that 2.4.3 is released and annouced I'm in the process of updating

Re: Updating 2.4 security page

2012-08-21 Thread Rainer Jung
Done. On 21.08.2012 17:41, Plüm, Rüdiger, Vodafone Group wrote: -Original Message- From: Jeff Trawick [mailto:] Sent: Dienstag, 21. August 2012 17:37 To: dev@httpd.apache.org Subject: Re: Updating 2.4 security page On Tue, Aug 21, 2012 at 11:30 AM, Rainer Jung wrote: Now that 2.4.3