OpenPKG CVS Repository
http://cvs.openpkg.org/
____________________________________________________________________________
Server: cvs.openpkg.org Name: Christoph Schug
Root: /v/openpkg/cvs Email: [EMAIL PROTECTED]
Module: openpkg-src Date: 28-Jul-2006 10:42:05
Branch: OPENPKG_2_4_SOLID Handle: 2006072809420401
Modified files: (Branch: OPENPKG_2_4_SOLID)
openpkg-src/apache apache.patch apache.spec
Log:
Security Fix (CVE-2006-3747)
Summary:
Revision Changes Path
1.18.4.3 +19 -0 openpkg-src/apache/apache.patch
1.297.2.7 +1 -1 openpkg-src/apache/apache.spec
____________________________________________________________________________
patch -p0 <<'@@ .'
Index: openpkg-src/apache/apache.patch
============================================================================
$ cvs diff -u -r1.18.4.2 -r1.18.4.3 apache.patch
--- openpkg-src/apache/apache.patch 14 Dec 2005 20:15:33 -0000 1.18.4.2
+++ openpkg-src/apache/apache.patch 28 Jul 2006 08:42:04 -0000 1.18.4.3
@@ -156,3 +156,22 @@
}
else {
/* XXX: This used to do *value = '\0'; ... which is totally bogus
+
+
+-----------------------------------------------------------------------------
+
+Security Fix (CVE-2006-3747)
+
+Index: apache_1.3.33/src/modules/standard/mod_rewrite.c
+--- apache_1.3.33/src/modules/standard/mod_rewrite.c.orig 2004-10-27
16:23:04 +0200
++++ apache_1.3.33/src/modules/standard/mod_rewrite.c 2006-07-27 19:28:17
+0200
+@@ -2735,7 +2735,7 @@
+ int c = 0;
+
+ token[0] = cp = ap_pstrdup(p, cp);
+- while (*cp && c < 5) {
++ while (*cp && c < 4) {
+ if (*cp == '?') {
+ token[++c] = cp + 1;
+ *cp = '\0';
+
@@ .
patch -p0 <<'@@ .'
Index: openpkg-src/apache/apache.spec
============================================================================
$ cvs diff -u -r1.297.2.6 -r1.297.2.7 apache.spec
--- openpkg-src/apache/apache.spec 14 Dec 2005 20:15:34 -0000
1.297.2.6
+++ openpkg-src/apache/apache.spec 28 Jul 2006 08:42:05 -0000
1.297.2.7
@@ -65,7 +65,7 @@
Group: Web
License: ASF
Version: %{V_apache}
-Release: 2.4.5
+Release: 2.4.6
# package options (suexec related)
%option with_suexec yes
@@ .
______________________________________________________________________
The OpenPKG Project www.openpkg.org
CVS Repository Commit List [email protected]
