Apache 0-day / apache-uaf / use after free bugs

2019-01-21 Thread Stefan Priebe - Profihost AG
Hi, in twitter and other social media channels they're talking about a current apache 0 day: https://twitter.com/i/web/status/1087593706444730369 which wasn't handled / isn't currently fixed. Some details are here: https://github.com/hannob/apache-uaf If this is true there will be exploits

Re: [RESULT][VOTE] Release httpd-2.4.38 PASSED

2019-01-21 Thread Dennis Clarke
On 1/21/19 9:37 AM, Daniel Ruggeri wrote: Hi, all;    I am delighted to announce that the VOTE proposed in the following thread has PASSED. https://lists.apache.org/thread.html/a41d69a42a6352aaeee583d9671a2f3854560d7e70a115fbbbd9469a@%3Cdev.httpd.apache.org%3E I have recorded the following

Re: svn commit: r32075 - /dev/httpd/ /release/httpd/

2019-01-21 Thread Marion & Christophe JAILLET
Fixed in r32079. I hope I did it right. CJ Le 21/01/2019 à 17:48, Marion et Christophe JAILLET a écrit : s/September/January/ in the announcement (html and txt) CJ > Message du 21/01/19 16:03 > De : drugg...@apache.org > A : c...@httpd.apache.org > Copie à : > Objet :

re: svn commit: r32075 - /dev/httpd/ /release/httpd/

2019-01-21 Thread Marion et Christophe JAILLET
  s/September/January/ in the announcement (html and txt)   CJ     > Message du 21/01/19 16:03 > De : drugg...@apache.org > A : c...@httpd.apache.org > Copie à : > Objet : svn commit: r32075 - /dev/httpd/ /release/httpd/ > > Author: druggeri > Date: Mon Jan 21 15:03:33 2019 > New

Re: [VOTE] Release httpd-2.4.38

2019-01-21 Thread Steffen
+1 Build and tested by Apache Lounge Community Windows Win32/Win64 VC11, VC14 VC15, no trouble reports received. Build with by Microsoft supported convert with the in the tarball included dsw/dsp/makefile files. Build with dependencies: - httpd.exe with OPENSSL_Applink and VC14/15

[RESULT][VOTE] Release httpd-2.4.38 PASSED

2019-01-21 Thread Daniel Ruggeri
Hi, all;    I am delighted to announce that the VOTE proposed in the following thread has PASSED. https://lists.apache.org/thread.html/a41d69a42a6352aaeee583d9671a2f3854560d7e70a115fbbbd9469a@%3Cdev.httpd.apache.org%3E I have recorded the following votes: PMC jorton, jim, druggeri, rjung, ylavic

Re: [VOTE] Release httpd-2.4.38

2019-01-21 Thread Daniel Ruggeri
On 1/20/2019 4:25 PM, Noel Butler wrote: > > >> >>   It's not just good, it's good enough! >> >   > tongue in cheek here, but... > shouldn't that be the other way around,  "It's not just good enough, > it's good!"   :) >   haha - tounge in cheek indeed. The line, "It's not just good, it's good