Bug#570740: apache: log file injection

2010-02-22 Thread Michael Gilbert
On Mon, 22 Feb 2010 21:37:40 +0100, Stefan Fritsch wrote: > Hi Michael, > > I don't think there is anything in Apache that should be changed for > these issues. I will close the bug and mark them as unimportant in the > security tracker: > > On Sunday 21 February 2010, Michael Gilbert wrote: >

Bug#570740: apache: log file injection

2010-02-20 Thread Michael Gilbert
Package: apache2 Severity: normal Tags: security Hi, the following issues were dislcosed in 2003 for apache, but they just got CVE numbers a few days ago. I haven't checked whether the latest version of apache2 is affected, and if it isn't, please close this bug. The problem actually seems rather