Should I file a bug for Apache?

[Lubomir Kundrak]

On Wed, 2008-01-23 at 12:41 -0600, Gilbert Sebenste wrote:
> Hello all,
> 
> I notice bugs have been filed for RHEL, but under the category of "all" 
> Linux...for the security holes (minor to significant) that have been 
> patched in 2.2.8, released on Saturday. Should I file a bug, or is a patch 
> in the works coming for F7-F8?

Gilbert, this is a bad place for such queries. Maybe
fedora-security-list@ would be better. Even better would be if you had
searched in Bugzilla. There are bugs filed for all the problems, and you
could have it found with little effort:

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-6421
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-6422
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-6388
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5000

Fixes are currently being made, but as it's some time since the bugs
were filed some poking around probably won't hurt.

-- 
Lubomir Kundrak (Red Hat Security Response Team)