Re: [users@httpd] 2.4.49 security fixes: more info

2021-09-23 Thread pgajdos
On Thu, Sep 23, 2021 at 12:41:10PM +0200, Riccardo Schirone wrote: > On 09/23, pgajdos wrote: > > On Thu, Sep 23, 2021 at 11:45:49AM +0200, Riccardo Schirone wrote: > > > I'm trying to gather more information about CVE-2021-40438, > > > CVE-2021-39275, > >

Re: [users@httpd] 2.4.49 security fixes: more info

2021-09-23 Thread pgajdos
On Thu, Sep 23, 2021 at 11:45:49AM +0200, Riccardo Schirone wrote: > I'm trying to gather more information about CVE-2021-40438, CVE-2021-39275, > CVE-2021-36160, CVE-2021-34798 that were recently fixed in Apache 2.4.49. The > CHANGES file and the security page on the website just contain very