On Sat, Apr 17, 2004 at 10:16:11PM +0200, Jan L??hr wrote: > what about http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0020 ? > Is debian finally going to fix it? Current consensus between the security team and the Apache maintainers is that it is not necessary to fix this in woody. -- - mdz