Apache shared memory scoreboard vulnerabilities
Posted Dec 12, 2002 6:28 UTC (Thu) by
proski (subscriber, #104)
In reply to:
Apache shared memory scoreboard vulnerabilities by rasmus
Parent article:
Apache shared memory scoreboard vulnerabilities
That's a valid question. The announcement is dated October 9, 2002. It have been more than two months since then. I cannot think of any reason why Red Hat 7.x would be unaffected. The current update for Red Hat 7.3 is apache-1.3.23-14, dated June 19. The ChangeLog in that package doesn't mention the fix.
Many people believe that the advantage of using Red Hat is support and timely updates even for the distribution that is not exactly "latest and greatest". Red Hat should really care to fulfill this expectation. It's unreasonable to expect everybody to upgrade to Red Hat 8.0, which uses Apache 2, and it's unfair to drop support for older versions silently, without an announcement.
(
Log in to post comments)