Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 21 Mar 2011 22:49:27 +0100
From: "Steinar H. Gunderson" <>
To: Josh Bressers <>
Subject: Re: CVE request: MPM-ITK module for Apache HTTPD

On Mon, Mar 21, 2011 at 04:24:38PM -0400, Josh Bressers wrote:
>> In certain configurations, the MPM-ITK module for Apache HTTPD serves
>> a
>> request as root user instead of the run user configured in the HTTPD
>> configuration:
> Please use CVE-2011-1176

Thanks. Here are the relevant announcements (with patches):

/* Steinar */

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.