Apache 2.0.48 ssl vuln?

Jon Fanti jon.fanti at unique.com
Fri May 7 13:48:21 UTC 2004


Hi guys.

Sorry if this has been dealt with before, I'm only on the digest list :)

We run Fedora Core 1 on some webservers that make use of mod_ssl and seem to 
have been caught out by the latest apache issue: 

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=27106

and:

http://www.apacheweek.com/features/security-20

On the morning this was discovered it would _seem_ that our webserver was hit by 
this same issue (thought I can't be 100% sure). I notice Redhat have released 
updates for RH9, but Fedora have done a fix for FC1 - is this because it is not an 
issue?

Thanks,

Jon.





More information about the fedora-list mailing list