Security Fix [mp2]

2007-03-22 Thread Fred Moyer
Philip gave a +1 here - http://marc.info/?l=apache-modperl&m=117462227916610&w=2 I think I need another +1, right? Working on the mp1 patch. Index: Changes === --- Changes (revision 508723) +++ Changes (working copy) @@ -1

[patch] fix unescaped variable interprolation in regular expression

2007-03-22 Thread Fred Moyer
I have a +1 from Phillip [1](mp2 patch), another? [1] http://marc.info/?l=apache-modperl&m=117462227916610&w=2 Index: Changes === --- Changes (revision 521567) +++ Changes (working copy) @@ -10,6 +10,9 @@ =item 1.30_01-dev

[patch] fix unescaped variable interprolation in regular expression

2007-03-22 Thread Fred Moyer
I have a +1 from Phillip [1](mp2 patch), another? [1] http://marc.info/?l=apache-modperl&m=117462227916610&w=2 Index: Changes === --- Changes (revision 521567) +++ Changes (working copy) @@ -10,6 +10,9 @@ =item 1.30_01-dev

Re: [patch] fix unescaped variable interprolation in regular expression

2007-03-22 Thread Randy Kobes
On Thu, 22 Mar 2007, Fred Moyer wrote: I have a +1 from Phillip [1](mp2 patch), another? [1] http://marc.info/?l=apache-modperl&m=117462227916610&w=2 Index: Changes === --- Changes (revision 521567) +++ Changes (working co

Re: Security Fix [mp2]

2007-03-22 Thread Randy Kobes
On Thu, 22 Mar 2007, Fred Moyer wrote: Philip gave a +1 here - http://marc.info/?l=apache-modperl&m=117462227916610&w=2 I think I need another +1, right? Working on the mp1 patch. Index: Changes === --- Changes (revision 508

Re: [patch] fix unescaped variable interprolation in regular expression

2007-03-22 Thread Philip M. Gollucci
Fred, don't let us stop you from commiting a similar change in mp1. I'm going to try to roll Apache-SimeLimit-0.91-RC2 tonight followed by releasing Apache-DBI 1.06 (also security fix). I'll attempt to make 2.0.4-RC1 tomorrow PST AM. I'll follow that by mp 1.30 If I understand this cor

Re: MP 2.0.3 & Apache 2.2.3 -> auth tests fail

2007-03-22 Thread Philip M. Gollucci
Gozer, This looks good to me. It fixes t/api/server_const.t and the test suite now/still passes 100% for me. Do you want to commit it or should I. Thats a +1 btw. FYI: FreeBSD 6.2-RELEASE gcc 3.4.6 perl 5.8.8 w/o ithreads httpd 2.2.4 ap(r,u) 1.2.8 w/o threads + apr_dbd_mysql and mysql