I have downloaded the sources of latest apache 2.2.8 that includes mod_ssl as 
well.  My concern is about the two vulnerabilities 
(http://www.securityfocus.com/bid/10736/info, 
http://www.securityfocus.com/bid/4189/info).  I do not have any information 
whether or not these two vulnerabilities still exist or have been fixed in the 
mod_ssl provided with apache sources 2.2.8.

After googling I could find out that these are solved in mod_ssl 2.8.19.  When 
I go to modssl.org to download the latest version there is no download for 
mod_ssl latest for apache 2.x versions?

Both of these look very old and looks like they might have been fixed.  But I 
did not find it anywhere written.



      5, 50, 500, 5000 - Store N number of mails in your inbox. Go to 
http://help.yahoo.com/l/in/yahoo/mail/yahoomail/tools/tools-08.html
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      modssl-users@modssl.org
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to