LWN.net Logo

Apache shared memory scoreboard vulnerabilities

Apache shared memory scoreboard vulnerabilities

Posted Nov 26, 2002 6:53 UTC (Tue) by rasmus (guest, #1728)
Parent article: Apache shared memory scoreboard vulnerabilities

How come RedHat haven't made a patch/upgrade for this?

Rasmus


(Log in to post comments)

Apache shared memory scoreboard vulnerabilities

Posted Dec 12, 2002 6:28 UTC (Thu) by proski (subscriber, #104) [Link]

That's a valid question. The announcement is dated October 9, 2002. It have been more than two months since then. I cannot think of any reason why Red Hat 7.x would be unaffected. The current update for Red Hat 7.3 is apache-1.3.23-14, dated June 19. The ChangeLog in that package doesn't mention the fix.

Many people believe that the advantage of using Red Hat is support and timely updates even for the distribution that is not exactly "latest and greatest". Red Hat should really care to fulfill this expectation. It's unreasonable to expect everybody to upgrade to Red Hat 8.0, which uses Apache 2, and it's unfair to drop support for older versions silently, without an announcement.

Apache shared memory scoreboard vulnerabilities

Posted Dec 12, 2002 20:37 UTC (Thu) by proski (subscriber, #104) [Link]

They have just released the update. There is an update for Red Hat 8.0 as well.

Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds