[lug] Apache security flaw

[rise]

On Tue, 18 Jun 2002, Evelyn Mitchell wrote:

> There was a discussion on Slashdot about this yesterday.
>
> The concensus was that this was a known bug, which was fixed in the CVS
> version of Apache. It was also generally agreed that this sort of 'Security
> by Press Release' is annoying and probably harmful.
>
> So, the maintainers already knew about and had fixed the bug. But some less
> than reputable company decided to get a bit of press publicising it.