spina ha scritto:Beh no, noi abbiamo aggiornato tutto alla
Slackware 13.37 e lì apache è alla 2.2.17. Il 2.2.19 è stato aggiunto nella current e, a giudicare dal
ChengeLog.txt non sembra un aggiornamento di sicurezza.
Fammi sapere se hai qualche info in più a riguardo,
Emanuele
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[slackware-security] httpd (SSA:2011-133-02)
New httpd packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1,
13.37, and -current. These have been compiled against the new versions of
apr and apr-util, which were upgraded to fix a security issue that affects
Apache httpd. It is recommended that all three updates be applied.
Here are the details from the Slackware 13.37 ChangeLog:
+--------------------------+
patches/packages/httpd-2.2.18-i486-1_slack13.37.txz: Upgraded.
This is a bug fix release, but since the upgrades to apr/apr-util require at
least an httpd recompile we opted to upgrade to the newest httpd.
+--------------------------+
--------------------------------------------------------------------------------------------------------------------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[slackware-security] httpd (SSA:2011-145-02)
New httpd packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1,
13.37, and -current to fix accidental ABI breakage caused by httpd-2.2.18.
Here are the details from the Slackware 13.37 ChangeLog:
+--------------------------+
patches/packages/httpd-2.2.19-i486-1_slack13.37.txz: Upgraded.
Revert ABI breakage in 2.2.18 caused by the function signature change
of ap_unescape_url_keep2f(). This release restores the signature from
2.2.17 and prior, and introduces ap_unescape_url_keep2f_ex().
Apache httpd-2.2.18 is considered abandoned. All users must upgrade.