On Sat, 22 Jun 2013 10:09:35 -0400
Jeff Trawick wrote:
> On Fri, Jun 21, 2013 at 2:43 PM, William A. Rowe Jr.
> wrote:
>
> > On Fri, 21 Jun 2013 13:19:36 -0400
> > Jeff Trawick wrote:
> >
> > > Even with the CVE-2011-3607 it is still possible to DOS the
> > > server by consuming huge amounts of
On Mon, 24 Jun 2013 10:47:17 -0500
"William A. Rowe Jr." wrote:
> On Sat, 22 Jun 2013 10:09:35 -0400
> Jeff Trawick wrote:
>
> > On Fri, Jun 21, 2013 at 2:43 PM, William A. Rowe Jr.
> > wrote:
> >
> > > On Fri, 21 Jun 2013 13:19:36 -0400
> > > Jeff Trawick wrote:
> > >
> > > > Even with the C
> + 2.0.x patch: http://people.apache.org/~wrowe/mod_rewrite-r1482349.patch
> + +1: wrowe
> + -1:
I think this backport stumbled on some renamed variables between 2.0
and 2.2. "text" is the format string in 2.0 but it's the result of
vfprintf in 2.2. I think "str2" needs to be escaped
On Mon, 24 Jun 2013 13:56:33 -0400
Eric Covener wrote:
>
> I think this backport stumbled on some renamed variables between 2.0
> and 2.2. "text" is the format string in 2.0 but it's the result of
> vfprintf in 2.2. I think "str2" needs to be escaped in 2.0
Agreed, my patch only picked up the f
I propose a release somewhere around the 4th of July,
to celebrate our independence from proprietary s/w!
I'll RM.
Am 24.06.2013 20:16, schrieb Jim Jagielski:
> I propose a release somewhere around the 4th of July,
> to celebrate our independence from proprietary s/w!
>
> I'll RM
a snapshot for testers at http://httpd.apache.org/dev/dist/
would be fine, it would take me 5 minutes to rebuild
our RPM from it
On Monday, June 24, 2013, William A. Rowe Jr. wrote:
> On Mon, 24 Jun 2013 10:47:17 -0500
> "William A. Rowe Jr." > wrote:
>
> > On Sat, 22 Jun 2013 10:09:35 -0400
> > Jeff Trawick > wrote:
> >
> > > On Fri, Jun 21, 2013 at 2:43 PM, William A. Rowe Jr.
> > > >wrote:
> > >
> > > > On Fri, 21 Jun 20
