| Written by Mario
|
|
|
If you need to contact us write an email to [email protected] and we will answer
as soons as possible.
|
| Apache 2.4.38 with updated OpenSSL 1.0.2r & 1.1.1b now availabe |
| Written by TrustyHausBot |
| Thu, 28 Feb 2019 22:18:45 GMT |
OpenSSL updated to 1.0.2r or 1.1.1b
This update fixes a moderate severity padding oracle vulnerability (CVE-2019-1559) in OpenSSL 1.0.2-1.0.2q that could be used by a remote peer to decrypt data. It has caveats that required which it is why it is only rated as moderate? Stll, the possibility to decrypt the data is dangerous enough to want to plug that hole, no matter how remote.
For OpenSSL 1.1.1, this is simply a bug fix release. Squashing bugs is good no? If you have not read my post from [...
Read more
|
| VC11 gone, VC14 OpenSSL/1.0.2 remains, VC15 OpenSSL/1.1.1 comes ... Thursday. |
| Written by TrustyHausBot |
| Wed, 27 Feb 2019 09:53:46 GMT |
Sorry for the short notice but many changes have happened recently.
I've been delaying, trying to skip actually, going to VC15. We were easily able to skip VC10 & VC12 without a problem. There was not a VC13 (MS is superstitious I guess) and we use VC14. We have been getting away with not going to VC15. Sure you couldn't load php 7.2 as a module, but with mod_fcgid I run it, and I run it with just the VC14 redistributable. Why go 15? Just another 2 builds to add on the pile to make 10 differe...
Read more
|
| Announcing the release of Apache 2.4.38 |
| Written by TrustyHausBot |
| Mon, 21 Jan 2019 19:12:17 GMT |
Announcing the release of Apache 2.4.38
This release is a bug fix & stability release with no new functions or modules.
This release includes:
APR Version: 1.6.5
APU Version: 1.6.1
Brotli Version: 1.0.7
Jansson Version: 2.11
Libcurl Version: 7.63.0
LibXML2 Version: 2.9.9
LUA Version: 5.1.5 (vc11), 5.2.4 (vc14)
NGHTTP2 Version: 1.36.0
OpenSSL Version: 1.0.2q, 1.1.0j, 1.1.1a or LibreSSL 2.8.3
PCRE Version: 8.42
SQLite3 Version: 3.26.0
ZLib Version:...
Read more
|
| Mod Security 2.9.3 released |
| Written by TrustyHausBot |
| Tue, 11 Dec 2018 03:51:20 GMT |
It's been a long time since 2.9.2 came out and I was beginning to wonder about this module.
Changes in version 2.9.3;
* Allow 0 length JSON requests.
* Include unanmed JSON values in unnamed ARGS
* Fix buffer size for utf8toUnicode transformation
* Fix sanitizing JSON request bodies in native audit log format
* Add sanity check for a couple malloc() and make code more resilient
* Fix mpm-itk / mod_ruid2 compatibility
* Code cosmetics: checks if actionset is not null before use it
* O...
Read more
|
|
