Of particular note is that 1.3.28 addresses and fixes 3 potential security issues:
- CAN-2003-0460 (cve.mitre.org): Fix the rotatelogs support program on Win32 and OS/2 to ignore special control characters received over the pipe. Previously such characters could cause it to quit logging and exit. We would like to thank the Hitachi Incident Response team for their responsible disclosure of this issue.
- VU#379828: The server could crash when going into an infinite loop due to too many subsequent internal redirects and nested subrequests.
- Eliminated leaks of several file descriptors to child processes, such as CGI scripts.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.