09:07 clement 

- Update to 2.2.2
- Enable mod_version by default

10:51 clement 

- Fix typo (it's actually in apache SVN repo)

Reported by:     Matt Smith <matt@xtaz.co.uk>

20:55 clement 

SECURITY: CVE-2005-3352 (cve.mitre.org)
     mod_imap: Escape untrusted referer header before outputting in HTML
     to avoid potential cross-site scripting.  Change also made to
     ap_escape_html so we escape quotes.  Reported by JPCERT.
     [Mark Cox]

Reported by:    simon