Re: [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released
Philip M. Gollucci writes:
> William A. Rowe, Jr. wrote:
> > Apache HTTP Server 2.2.3 Released
> >
> > The Apache Software Foundation and The Apache HTTP Server Project are
> > pleased to announce the release of version 2.2.3 of the Apache HTTP Server
> > ("Apache").
> >
> > This version of Apache is principally a bug and security fix release. The
> > following potential security flaws are addressed;
> >
> > CVE-2006-3747: An off-by-one flaw exists in the Rewrite module,
> > mod_rewrite, as shipped with Apache 1.3 since 1.3.28, 2.0 since 2.0.46,
> > and 2.2 since 2.2.0.
> Is a release in the 2.0.x (2.0.59) soon to follow ?
Both 2.0.59 and 1.3.37 have been out for at least a couple of days now,
both including the mod_rewrite fix.