看板FB_security
標 題Re: apache2 port
發信站NCTU CSIE FreeBSD Server (Fri Oct 1 04:51:17 2004)
轉信站ptt!FreeBSD.csie.NCTU!not-for-mail
no. you can tell by PORTVERSION in the Makefile.
On Thu, Sep 30, 2004 at 01:45:16PM -0700, Eli Dart wrote:
> Hi all,
>
> There has been another vulnerability [1] discovered in apache2. This
> affects only version 2.0.51 (where it was introduced). The ports
> tree is frozen, pending 5.3-R, so I assume that an update of the
> apache2 port to 2.0.52 is not forthcoming any time soon.
>
> The question is this -- since the apache2 in the ports tree is 2.0.50
> plus patches, does the version in the ports tree have this
> vulnerability? It seems that it only would if the patches to 2.0.50
> introduced the vulnerability... Does anyone know?
>
> Thanks!
>
> --eli
>
>
>
>
--
Peter C. Lai
University of Connecticut
Dept. of Molecular and Cell Biology
Yale University School of Medicine
SenseLab | Research Assistant
http://cowbert.2y.net/
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"