Summary: | net-www/apache: Arbitrary code execution (CVE-2006-3747) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Matthias Geerdsen (RETIRED) <vorlon> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | major | CC: | apache-bugs, bernd, chainsaw, jaervosz, spida |
Priority: | High | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3747 | ||
Whiteboard: | C1 [glsa] jaervosz | ||
Package list: | Runtime testing required: | --- |
Description
Matthias Geerdsen (RETIRED)
2006-07-28 03:44:22 UTC
Patched versions of 2.0.58, 1.3.34, and 2.2.2 that address this issue are now in CVS. Full version bumps that include the other features of the new versions will come this weekend. Please have the remaining archs mark stable the following: net-www/apache-2.0.58-r2 new-www/apache-1.3.34-r14 (2.2.x line is still p.masked so we do not want stable marking there yet) arches please test and mark stable if possible *** Bug 141763 has been marked as a duplicate of this bug. *** marked stable on alpha by kloeri -> removing alpha from CC: -> changing status to [glsa] 29 Jul 2006; Bryan marked stable on alpha by kloeri -> removing alpha from CC: -> changing status to [glsa] 29 Jul 2006; Bryan Ã<98>stergaard <kloeri@gentoo.org> apache-1.3.34-r14.ebuild, apache-2.0.58-r2.ebuild: Stable on alpha. GLSA 200608-01 thanks everyone |