Re: [cobalt-developers] Fwd: CERT Advisory CA-2002-20 Multiple Vulnerabilities in CDE ToolTalk

[gerald waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>]

On Thu, 11 Jul 2002, Jay Summers wrote:

> > The cobalt GUI seems to dislike other apache versions. I guess it would
> > be too much work in a reasonable amount of time to check all possible
> > implications of using a newer apache version so the decision to release
> > a patch to the current apache is fine IMHO. Now they will have the time
> > (and should use it) to package newer apache versions.
>
> I've compiled newer versions of the ahttpd daemon after the recent Apache
> vulnerabilities. Currently I'm running Apache 1.3.26 for ahttpd and haven't
> noticed any issues. The GUI is still working fine. I think William's point
> was that the version of Apache running the virtual sites has nothing to do
> with the GUI, so why not update it to a recent version if it has to be
> updated anyway.
>

I can confirm this I run 1.26 on RaQ2,3,4
I don't see anything wrong with the GUI

--
Gerald Waugh