Hi List

One of our clients is using Lasso 8.6.3 with Apache on Windows.

They have had the site "scanned" by a PCI checker and it failed - due to an apparent problem with the version of Apache.

"Apache mod_negotiation Multi-Line Filename Upload Vulnerabilities"

https://issues.apache.org/bugzilla/show_bug.cgi?id=46837

This (apparently) was fixed in Apache 2.3.2+ However, the Lasso Connector (Lasso8ConnectorforApache2.2.dll) isn't going to work with 2.3*. I have notice a Linux connector for 2.4 has been compiled as a .so module.

However, Is there a Lasso connector I can use for Apache 2.3 or above? It would be nice to move to 2.4 if possible.

(*I haven't actually tried this, as I will need to setup a server to do it).

A happy new year to everyone.

Jon Harris



#############################################################

This message is sent to you because you are subscribed to
the mailing list Lasso Lasso@lists.lassosoft.com
Official list archives available at http://www.lassotalk.com
To unsubscribe, E-mail to: <Lasso-unsubscribe@lists.lassosoft.com>
Send administrative queries to <Lasso-request@lists.lassosoft.com>