Package: apache2 / 2.4.25-3+deb9u9
Metadata
| Package | Version | Patches format |
|---|---|---|
| apache2 | 2.4.25-3+deb9u9 | 3.0 (quilt) |
Patch series
view the series file| Patch | File delta | Description |
|---|---|---|
| fhs_compliance.patch | (download) |
configure |
6 3 + 3 - 0 ! |
fix up fhs file locations for apache2 droppings. |
| no_LD_LIBRARY_PATH.patch | (download) |
support/envvars-std.in |
7 0 + 7 - 0 ! |
remove ld_library_path from envvars-std |
| suexec CVE 2007 1742.patch | (download) |
support/suexec.c |
17 14 + 3 - 0 ! |
fix race condition with chdir Fix /var/www* being accepted as docroot instead of /var/www/* (the same for public_html* instead of public_html/* ) |
| customize_apxs.patch | (download) |
support/apxs.in |
139 34 + 105 - 0 ! |
adapt apxs to debian specific changes - Make apxs2 use a2enmod and /etc/apache2/mods-available - Make libtool happier - Use LDFLAGS from config_vars.mk, allow to override them |
| build_suexec custom.patch | (download) |
Makefile.in |
10 6 + 4 - 0 ! |
add suexec-custom to the build system |
| reproducible_builds.diff | (download) |
server/Makefile.in |
5 3 + 2 - 0 ! |
make builds reproducible Don't use __DATE__ __TIME__. Use changelog date instead. Sort exported symbols. |
| fix_logresolve_segfault.patch | (download) |
support/logresolve.c |
2 1 + 1 - 0 ! |
--- |
| mpm_event_restart_segfault_PR60487.patch | (download) |
server/mpm/event/event.c |
6 4 + 2 - 0 ! |
--- |
| CVE 2017 3167.diff | (download) |
include/ap_mmn.h |
4 3 + 1 - 0 ! |
--- |
| CVE 2017 3169.diff | (download) |
modules/ssl/ssl_engine_io.c |
15 8 + 7 - 0 ! |
--- |
| CVE 2017 7668.diff | (download) |
server/util.c |
6 2 + 4 - 0 ! |
--- |
| CVE 2017 7679.diff | (download) |
modules/http/mod_mime.c |
4 2 + 2 - 0 ! |
--- |
| CVE 2017 9788 mod_auth_digest.diff | (download) |
modules/aaa/mod_auth_digest.c |
4 2 + 2 - 0 ! |
--- |
| core Disallow Methods registration at run time .htac.patch | (download) |
server/core.c |
6 6 + 0 - 0 ! |
core: disallow methods' registration at run time (.htaccess), they may be used only if registered at init time (httpd.conf). |
| CVE 2017 15710 mod_authnz_ldap.diff | (download) |
modules/aaa/mod_authnz_ldap.c |
10 7 + 3 - 0 ! |
--- |
| CVE 2017 15715 regex line endings.diff | (download) |
include/ap_mmn.h |
5 5 + 0 - 0 ! |
--- |
| CVE 2018 1283 mod_session.diff | (download) |
modules/session/mod_session.c |
13 8 + 5 - 0 ! |
--- |
| CVE 2018 1301 HTTP request read out of bounds.diff | (download) |
server/protocol.c |
76 42 + 34 - 0 ! |
--- |
| CVE 2018 1303 mod_cache_socache oob.diff | (download) |
modules/cache/mod_cache_socache.c |
3 2 + 1 - 0 ! |
--- |
| CVE 2018 1312 mod_auth_digest nonce.diff | (download) |
modules/aaa/mod_auth_digest.c |
241 51 + 190 - 0 ! |
--- |
| mod_http2 upgrade to 2.4.41.diff | (download) |
configure |
2 1 + 1 - 0 ! |
--- |
| mod_http2 revert new proxy features.diff | (download) |
modules/http2/mod_proxy_http2.c |
2 1 + 1 - 0 ! |
--- |
| add_AP_STATUS_IS_HEADER_ONLY.diff | (download) |
include/httpd.h |
5 5 + 0 - 0 ! |
--- |
| fcgi_crash.diff | (download) |
server/util_fcgi.c |
11 7 + 4 - 0 ! |
--- |
| CVE 2018 17199 mod session ignore timeout.diff | (download) |
modules/session/mod_session.c |
24 13 + 11 - 0 ! |
fix for cve-2018-17199 |
| CVE 2019 0211 privilege escalation.diff | (download) |
include/scoreboard.h |
4 3 + 1 - 0 ! |
--- |
| CVE 2019 0217 digest collusion in mod_auth_digest.diff | (download) |
modules/aaa/mod_auth_digest.c |
26 12 + 14 - 0 ! |
--- |
| CVE 2019 0220 merge slashes.diff | (download) |
include/ap_mmn.h |
2 2 + 0 - 0 ! |
--- |
| CVE 2019 10092 1.patch | (download) |
modules/http/http_protocol.c |
86 26 + 60 - 0 ! |
[patch] merge of r1864191 from trunk:
*) core, proxy: remove request URL and headers from error docs
[Eric Covener]
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1864207 13f79535-47bb-0310-9956-ffa450edef68
|
| CVE 2019 10092 2.patch | (download) |
modules/proxy/mod_proxy.c |
2 1 + 1 - 0 ! |
[patch] merge r1864699 from trunk: lognos git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1864702 13f79535-47bb-0310-9956-ffa450edef68 |
| CVE 2019 10098.patch | (download) |
server/util_pcre.c |
3 2 + 1 - 0 ! |
patch to set pcre_dotall by default |
