If anyone still use Apache1 / mod_perl1, there's an important security patch.
 -  Bill

---------- Forwarded message ----------
From: Fred Moyer <f...@redhotpenguin.com>
Date: Tue, May 12, 2009 at 11:50 PM
Subject: [pm_groups] Fwd: [ANNOUNCE] mod_perl 1.31
To: pm_gro...@pm.org


Contains a security fix for the 1.x branch, might want to spread this around.


---------- Forwarded message ----------
From: Philippe M. Chiasson <go...@apache.org>
Date: Tue, May 12, 2009 at 7:46 PM
Subject: [ANNOUNCE] mod_perl 1.31
To: annou...@perl.apache.org
Cc: modperl List <modp...@perl.apache.org>, d...@perl.apache.org


The uploaded file

   mod_perl-1.31.tar.gz

has entered CPAN as

 file: $CPAN/authors/id/G/GO/GOZER/mod_perl-1.31.tar.gz
 size: 389960 bytes
  md5: d2188bf500e9f00cd78dc97c3fbf6b97

It's finally here! After quite a few release candidates, I am
happy to share with you all this new mod_perl release. Enjoy!

Changes since 1.30:

Fix static APACI build on Mac OS X. [Gozer]

Fix XSS vulnerability in Apache::Status reported by
Richard J. Brain, CVE-2009-0796
[Fred Moyer]

On Win32, mod_perl.h needs to include <malloc.h> before the perl
headers, at least when built with USE_ITHREADS
[Steve Hay]

Win32 needs PERL_SYS_INIT/PERL_SYS_TERM calls when built with
USE_ITHREADS [sic--that's different to USE_THREADS]. In fact,
they ought to be always called if they are defined
[Steve Hay]

Fix potential segfault when the environment contains
NULL values [Mike Schilli]

Fix static APACI build against newer apache-1.3.38+
[Gozer]

Fixed modules/regex.t test 4 on Win32
[Steve Hay]

Avoid possible segfault when PerlFreshRestart is On.
[Michael Rendell <mich...@cs.mun.ca>]

Prevent segfault when running with perl >= 5.9.3
[Steve Hay]

Fix shared libary extensions on Win32 to be .dll not .so
[Nikolay Ananiev <anan...@thegdb.com>]

Patch to mod_perl.dsp to remove /D _WINSOCK2API_ on Win32
for perl >= 5.8.6 [Steve Hay]

--
Philippe M. Chiasson     GPG: F9BFE0C2480E7680 1AE53631CB32A107 88C3A5A5
http://gozer.ectoplasm.org/       m/gozer\@(apache|cpan|ectoplasm)\.org/

--
Request pm.org Technical Support via supp...@pm.org

pm_groups mailing list
pm_gro...@pm.org
http://mail.pm.org/mailman/listinfo/pm_groups

_______________________________________________
Boston-pm mailing list
Boston-pm@mail.pm.org
http://mail.pm.org/mailman/listinfo/boston-pm

Reply via email to