Bug#327210: apache2: CAN-2005-2700

2005-09-08 Thread Adam Conrad
Juergen Kreileder wrote: > Package: apache2 > Version: 2.0.54-4 > Severity: critical > Tags: security, fixed-upstream > > See http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2700 An update is already in the works for this. ... Adam -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with

Bug#327210: apache2: CAN-2005-2700

2005-09-08 Thread Juergen Kreileder
Package: apache2 Version: 2.0.54-4 Severity: critical Tags: security, fixed-upstream See http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2700 , | ssl_engine_kernel.c in mod_ssl before 2.8.24, when using | "SSLVerifyClient optional" in the global virtual host configuration, | does n