Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2006-2658: xsp directory traversal vulnerability https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=206510 paul(a)all-the-johnsons.co.uk changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED ------- Additional Comments From paul(a)all-the-johnsons.co.uk 2006-09-14 16:42 EST ------- I've looked at this report and by the looks of it, yes the FE xsp/mod_mono will come under the same umberella (built from the same sources). I've asked on the mono-developers list if there is a patch available and if there is, I shall apply it quickly. Could you please advise what to do in the meantime? Should I put an advisory out on the FE list alerting people to the issue? -- Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2006-2658: xsp directory traversal vulnerability https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=206510 paul(a)all-the-johnsons.co.uk changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |CLOSED Resolution| |NOTABUG ------- Additional Comments From paul(a)all-the-johnsons.co.uk 2006-09-14 16:54 EST ------- Just been advised that it only relates to the 1.1.14 version of mod_mono not 1.1.17 (which is packaged for both FE5 and rawhide) Closing the bug. Thanks for the advice :-) -- Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.