[CentOS] Backporting and Apache 2.0.52 is 4 1/2 years old
rainer at ultra-secure.de
Sun Mar 22 21:13:10 UTC 2009
Am 22.03.2009 um 20:40 schrieb Rob Townley:
> states that Apache 2.0.52 is 4 years old and the latest version is
> i am no longer a httpd expert, but at least one of the security fixes
> involves XSS attacks via malformed ftp commands. I also realize that
> redhat / centos may patch things separately from Apache and that the
> sysadmin has a great deal to do with how secure things are, but
> almost 5 years?
Download the src-RPM and make a checklist which CVEs are fixed and
(It's in a changelog-file somewhere - I don't remember the details,
it's a while that I actually looked)
Then, return here.
More information about the CentOS