Apache 1.3.27, Bug Fix and Security Updates

← Back to Stories (view on slashdot.org)

Apache 1.3.27, Bug Fix and Security Updates

Posted by michael on Friday October 4, 2002 @02:20AM from the apt-get dept.

Triumph The Insult C writes "Apache 1.3.27 is out, addressing 3 security problems and includes some other updates. Check out cve.mitre.org for CAN-2002-0839, CAN-2002-0840 and CAN-2002-0843. You can grab .27 from the mirrors. Details on the security problems and the other updates to .27 can be found here."

24 comments

Min score:

Reason:

Sort:

interesting by fredopalus · 2002-10-04 02:26 · Score: -1, Troll

Apache has come up with a new way to release software;(2.0.42... 2.0.43... 1.3.27)backwards! :-)

--
Jonahweb.com has stuff.
1. Re:interesting by Anonymous Coward · 2002-10-04 02:49 · Score: -1, Flamebait
  
  Shut the fuck up moron! 1.3.* is the official branch. 2.0.* is the developement one, you use it at your own risk. Don't consider yourself on top of it all just because it's a bigger number.
Slow news day? by bay43270 · 2002-10-04 02:26 · Score: 2

A minor point release with some bug fixes (apparently too minor to even mention in the description). Neither Bill Gates or someone from the RIAA have taken away more of our rights today?
1. Re:Slow news day? by Zocalo · 2002-10-04 02:41 · Score: 2
  
  If it's that slow a news day, then we will shortly see another announcement to the effect that Apache v2.0.43 has been released as well. It fixes CAN-2002-0840 which is the bug that was previously covered on Slashdot here.
  
  --
  UNIX? They're not even circumcised! Savages!
Apache Saying Matthew Murphy Was Irresponsible? by Doug+Dante · 2002-10-04 02:38 · Score: 3, Insightful

CAN-2002-0839 ... We thank iDefense for their responsible notification and disclosure of this issue.
CAN-2002-0840 ... We thank Matthew Murphy for notification of this issue.
CAN-2002-0843 .... We thank David Wagner for the responsible notification and disclosure of this issue.

--
The world will not get better through technology. We must seek to be better people.
1. Re:Apache Saying Matthew Murphy Was Irresponsible? by therealmoose · 2002-10-04 02:53 · Score: 4, Funny
  
  Hey, if you invented a law like Murphy did that fscks up almost everthing, do you expect to be called responsible?
2. Re:Apache Saying Matthew Murphy Was Irresponsible? by Anonymous Coward · 2002-10-04 02:54 · Score: -1, Troll
  
  Yep, Matthew Murphy locked his kids in the mini-van while visiting the coders at the office. That's not really responsible from his part.
3. Re:Apache Saying Matthew Murphy Was Irresponsible? by Hard_Code · 2002-10-04 17:21 · Score: 2
  
  No, you expect to be called Finagle...
  
  --
  
  It's 10 PM. Do you know if you're un-American?
4. Re:Apache Saying Matthew Murphy Was Irresponsible? by Anonymous Coward · 2002-10-10 07:29 · Score: 0
  
  Idiot moderators. That wasn't a Troll, it was a Joke. Some of us thought it was pretty damn funny.
Also 2.0 by joyoflinux · 2002-10-04 02:58 · Score: 3, Informative

Apache 2.0.43 was released also, available here, also.
1. Re:Also 2.0 by Anonymous Coward · 2002-10-07 22:55 · Score: 1, Funny
  
  The three people who use it will be really grateful that you pointed that out :-)
mod_ssl and Apache-SSL by roly · 2002-10-04 03:05 · Score: 2, Informative

here is a copy of mod_ssl that works on 1.3.27 (remember, use --force), and for Apache-SSL I posted a patch to the Apache-SSL mailing list.

--
"With Microsoft, you get Windows. With Linux, you get the full house" - unknown
1. Re:mod_ssl and Apache-SSL by Evro · 2002-10-04 03:25 · Score: 2
  
  Also in that directory:
  
  -rw-r--r-- 1 modssl modssl 753416 Oct 4 13:53 mod_ssl-2.8.11-1.3.27.tar.gz -rw-r--r-- 1 modssl modssl 286 Oct 4 13:53 mod_ssl-2.8.11-1.3.27.tar.gz.asc
  
  --
  rooooar
2. Re:mod_ssl and Apache-SSL by roly · 2002-10-04 22:05 · Score: 0
  
  When I posted the comment that mod_ssl file didn't exist, I tried it and it has a few bugs and its not on the modssl.org homepage yet
  
  --
  "With Microsoft, you get Windows. With Linux, you get the full house" - unknown
Kudos and thanks! by Locke!Erasmus · 2002-10-04 05:33 · Score: 2, Funny

Thanks for fixing those bugs, guys!
Is there perhaps any way you can fix my internet explorer next?

--
I should have picked out the nickname Demosthenes!Tecumseh.
1. Re:Kudos and thanks! by Anonymous Coward · 2002-10-04 05:39 · Score: 0
  
  Yes, install Mozilla or Phoenix.
2. Re:Kudos and thanks! by nirvdrum · 2002-10-07 11:35 · Score: 1
  
  Installing a replacement browser does not fix another's deficiencies. What is your solution for Mozilla's deficiencies? Opera?
  
  --
  If there was a "-1 Not Funny", that'd be my most used mod.
Here is the patch I posted to Apache-SSL maillist by roly · 2002-10-04 22:10 · Score: -1, Flamebait

apache_1.3.27_fix.patch
--- SSLpatch.old Sat Oct 5 00:47:02 2002 +++ SSLpatch Sat Oct 5 00:47:35 2002 @@ -474,7 +474,7 @@ @@ -428,7 +439,11 @@ #define SERVER_BASEVENDOR "Apache Group" #define SERVER_BASEPRODUCT "Apache" - #define SERVER_BASEREVISION "1.3.26" + #define SERVER_BASEREVISION "1.3.27" -#define SERVER_BASEVERSION SERVER_BASEPRODUCT "/" SERVER_BASEREVISION +#ifdef APACHE_SSL +# define SERVER_BASEVERSION SERVER_BASEPRODUCT "/" SERVER_BASEREVISION " Ben-SSL/1.48"

--
"With Microsoft, you get Windows. With Linux, you get the full house" - unknown
Re:Oops... by roly · 2002-10-04 22:13 · Score: 0

slashdot edited out my pre tags, get patch to make apache-ssl work in 1.3.27 here: http://www.smarttux.com/apache-1.3.27-fix.patch

--
"With Microsoft, you get Windows. With Linux, you get the full house" - unknown
Triumph the Insult C? by Anonymous Coward · 2002-10-05 10:54 · Score: -1, Offtopic

C?

Compiler?

Now that'd rock!

bob.c: In function `function':
bob.c:599: `a_table' undeclared. Jackass.
bob.c:604: warning: control reaches end of non-void function. Go back to Visual Basic, you moron.

Hmm. Why am I tempted to hack up gcc?
1. Re:Triumph the Insult C? by Anonymous Coward · 2002-10-05 13:43 · Score: 0
  
  > Hmm. Why am I tempted to hack up gcc?
  
  Because you have no life/job/girlfriend/boyfriend/friends?
  
  Pick one (or more)
2. Re:Triumph the Insult C? by Anonymous Coward · 2002-10-05 21:48 · Score: 0
  
  i tried to get the full thing ... Triumph The Insult Comic Dog, but /. cut it off at the 'C'
ap4c|-|3 by cybermace5 · 2002-10-09 02:33 · Score: 2

OMG when d0 w3 g3t$ teh ap4c|-|3 1.3.37??!1!!11oneoneone11!

[Disclaimer: tough week, please beat me gently]

--
...
Apache Cocoon by avev1 · 2002-10-17 00:42 · Score: 1

Does anyone have any knowledge on Apache Cocoon? I need to use japanese/chinese fonts for an xml to PDF conversion and am unable to determine if there are any solutions. Additionally can anyone recommend a good xslt editor for use with this, perhaps cheap or even open source?