Justin Erenkrantz | 8 Feb 2005 18:20
Picon
Favicon

Apache HTTP Server 2.0.53 Released

                   Apache HTTP Server 2.0.53 Released

   The Apache Software Foundation and The Apache HTTP Server Project are
   pleased to announce the release of version 2.0.53 of the Apache HTTP
   Server ("Apache").  This Announcement notes the significant changes
   in 2.0.53 as compared to 2.0.52. The Announcement is also available in
   German from:

        http://www.apache.org/dist/httpd/Announcement2.txt.de

   This version of Apache is principally a bug fix release.

   This release is compatible with modules compiled for 2.0.42 and
   later versions.  We consider this release to be the best version of
   Apache available and encourage users of all prior versions to
   upgrade.

   Apache HTTP Server 2.0.53 is available for download from

     http://httpd.apache.org/download.cgi

   Please see the CHANGES_2.0 file, linked from the above page, for
   a full list of changes.

   Apache 2.0 offers numerous enhancements, improvements, and performance
   boosts over the 1.3 codebase.  For an overview of new features introduced
   after 1.3 please see

     http://httpd.apache.org/docs-2.0/new_features_2_0.html

(Continue reading)

Gregory (Grisha) Trubetskoy | 13 Feb 2005 04:00
Picon
Favicon
Gravatar

Mod_python 3.1.4 and 2.7.11 (security)


The Apache Software Foundation and The Apache HTTP Server Project are pleased 
to announce the release of versions 3.1.4 and 2.7.11 of mod_python.

This release addresses a vulnerability in mod_python's publisher handler 
whereby a carefully crafted URL would expose objects that should not be 
visible, leading to an information leak. The Common Vulnerabilities and 
Exposures project (http://cve.mitre.org/) has assigned the name CAN-2005-0088 
to this issue.

Users of the publisher handler are urged to upgrade as soon as possible.

There are no other changes or improvements from the previous version in
this release.

At this point the new version is only available as a source code archive.
Users of mod_python on Win32 platform can update their installation by simply 
replacing the publisher.py file with the latest version from the source code 
archive.

Mod_python is available for download from:

http://httpd.apache.org/modules/python-download.cgi

For more information about mod_python visit
http://www.modpython.org/

Regards,

Grisha Trubetskoy
(Continue reading)


Gmane