Dec 31, 2014; 13:23
Jon Harris
Lasso 8.6.3 with Apache 2.3 for Windows
Hi List
One of our clients is using Lasso 8.6.3 with Apache on Windows.
They have had the site "scanned" by a PCI checker and it failed - due to an apparent problem with the version of Apache.
"Apache mod_negotiation Multi-Line Filename Upload Vulnerabilities"
https://issues.apache.org/bugzilla/show_bug.cgi?id=46837
This (apparently) was fixed in Apache 2.3.2+ However, the Lasso Connector (Lasso8ConnectorforApache2.2.dll) isn't going to work with 2.3*. I have notice a Linux connector for 2.4 has been compiled as a .so module.
However, Is there a Lasso connector I can use for Apache 2.3 or above? It would be nice to move to 2.4 if possible.
(*I haven't actually tried this, as I will need to setup a server to do it).
A happy new year to everyone.
Jon Harris
#############################################################
This message is sent to you because you are subscribed to
the mailing list Lasso Lasso@lists.lassosoft.com
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <Lasso-unsubscribe@lists.lassosoft.com>
Send administrative queries to <Lasso-request@lists.lassosoft.com>