Re: Issues with mod_dav in httpd 2.2.25 and 2.4.6

2013-11-08 Thread Ben Reser
On 11/7/13 9:46 PM, Ben Reser wrote: > I believe some binary packages have included these patches already. But I'm > not sure which ones have and have not. Hopefully those vendors can respond > here to note that. Note that the patches are against httpd and not SVN so if > the binary package you'

Re: Issues with mod_dav in httpd 2.2.25 and 2.4.6

2013-11-08 Thread Ivan Zhakov
On 8 November 2013 09:46, Ben Reser wrote: > The current releases of httpd (at the time of writing this email) have two > issues when used with Subversion. At this point httpd doesn't release very > often leaving some users with an unfortunate choice to leave their httpd > unpatched from some sec

Re: Issues with mod_dav in httpd 2.2.25 and 2.4.6

2013-11-08 Thread Pavel Lyalyakin
Hello, I've just replied to the related thread and noticed this one. VisualSVN Server has the patch applied since 2.6.5 version: http://www.visualsvn.com/server/changes/#v2.6.5 On Fri, Nov 8, 2013 at 9:46 AM, Ben Reser wrote: > The current releases of httpd (at the time of writing this email) ha

Issues with mod_dav in httpd 2.2.25 and 2.4.6

2013-11-07 Thread Ben Reser
The current releases of httpd (at the time of writing this email) have two issues when used with Subversion. At this point httpd doesn't release very often leaving some users with an unfortunate choice to leave their httpd unpatched from some security issues fixed by those releases or to deal with