Re: [users@httpd] Apache Security Page and CVE-2011-3192

2011-08-31 Thread William A. Rowe Jr.
On 8/31/2011 8:17 AM, Jeff Trawick wrote: > On Wed, Aug 31, 2011 at 6:22 AM, Paul Reilly wrote: >> Why is there no information about the recent header Rang DoS vulnerability >> in Apache on the Apache security page? >> >> http://httpd.apache.org/security/ >> >> I would have expected at least to

Re: [users@httpd] Apache Security Page and CVE-2011-3192

2011-08-31 Thread Jeff Trawick
On Wed, Aug 31, 2011 at 6:22 AM, Paul Reilly wrote: > Why is there no information about the recent header Rang DoS  vulnerability > in Apache on the Apache security page? > >  http://httpd.apache.org/security/ > > I would have expected at least to see some mention of it, and possible > work-around

[users@httpd] Apache Security Page and CVE-2011-3192

2011-08-31 Thread Paul Reilly
Why is there no information about the recent header Rang DoS vulnerability in Apache on the Apache security page? http://httpd.apache.org/security/ I would have expected at least to see some mention of it, and possible work-arounds. Paul