Re: [users@httpd] RE: [ANNOUNCE] Apache HTTP Server 2.4.29 Released

2017-10-25 Thread Craig Young
I’m not sure if this is what is referred to in the Apache 2.4.29 announcement, but please note that the Apache Portable Runtime v1.6.3 release resolved memory safety issues I found in functions used within HTTP server. This was released in conjunction with 2.4.29. Using HTTP server linked to

[users@httpd] Memory Safety Issues Handling SDBM

2017-10-23 Thread Craig Young
.x.html [2] https://fuzzing-project.org/tutorial-tips.html Best Regards, Craig Young Principal Security Researcher, Tripwire VERT