Marcus Meissner
msmeissn
- ibs-maintenance-team 2 tasks
- maintenance-opensuse.org 3 tasks
- proactive-security 0 tasks
- qam-openqa 5 tasks
- reactive-security 0 tasks
- security-team 8 tasks
Involved Projects and Packages
This update fixes several security issues in the Apache2 webserver.
CVE-2011-3368, CVE-2011-4317: This update also includes several fixes for a mod_proxy reverse exposure via RewriteRule or ProxyPassMatch directives.
CVE-2011-3607: Integer overflow in ap_pregsub function resulting in a heap based buffer overflow could potentially allow local attackers to gain privileges
In addition to that the following changes were made:
- new template file: /etc/apache2/vhosts.d/vhost-ssl.template
allow TLSv1 only, browser match stuff commented out.
- rc script /etc/init.d/apache2: handle reload with deleted binaries
by message to stdout only, but refrain from sending signals.
- httpd-2.2.x-bnc727071-mod_authnz_ldap-utf8.diff: make non-ascii
eg UTF8 passwords work with mod_authnz_ldap. [bnc#727071]
Mon | |||||||||||||||||||||||||||||||||||||||||||||||||||||
Tue | |||||||||||||||||||||||||||||||||||||||||||||||||||||
Wed | |||||||||||||||||||||||||||||||||||||||||||||||||||||
Thu | |||||||||||||||||||||||||||||||||||||||||||||||||||||
Fri | |||||||||||||||||||||||||||||||||||||||||||||||||||||
Sat | |||||||||||||||||||||||||||||||||||||||||||||||||||||
Sun |