On 2017/06/24 16:29, David CARLIER wrote: > Oops I forgot the patch. > > On 24 June 2017 at 16:21, Stuart Henderson <s...@spacehopper.org> wrote: > > > On 2017/06/24 15:54, David CARLIER wrote: > > > Hi, > > > > > > Here a diff for apache-httpd to address these CVE > > > CVE-2017-3167 <http://cve.mitre.org/cgi-bin/ > > cvename.cgi?name=CVE-2017-3167> > > > CVE-2017-3169 <http://cve.mitre.org/cgi-bin/ > > cvename.cgi?name=CVE-2017-3169> > > > CVE-2017-7659 <http://cve.mitre.org/cgi-bin/ > > cvename.cgi?name=CVE-2017-7659> > > > CVE-2017-7668 <http://cve.mitre.org/cgi-bin/ > > cvename.cgi?name=CVE-2017-7668> > > > and CVE-2017-7679 > > > <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7679> > > > > > > Kind regards. > > > <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3169> > > > > Diff missing so I can't tell, but is SSL working? If not then see > > Bernard's patches in https://bz.apache.org/bugzilla/show_bug.cgi?id=61184 > > > >
There seems to be something missing, I get this if I try to start a server with mod_ssl configured : httpd2:/usr/local/lib/apache2/mod_ssl.so: undefined symbol 'X509_STORE_CTX_get0_store' httpd2:/usr/local/lib/apache2/mod_ssl.so: undefined symbol 'X509_get0_tbs_sigalg' httpd2:/usr/local/lib/apache2/mod_ssl.so: undefined symbol 'DH_set0_pqg' httpd2:/usr/local/lib/apache2/mod_ssl.so: undefined symbol 'free_bio_methods' httpd2:/usr/local/lib/apache2/mod_ssl.so: undefined symbol 'init_bio_methods' httpd2: Syntax error on line 142 of /etc/apache2/httpd2.conf: Cannot load /usr/local/lib/apache2/mod_ssl.so into server: Cannot load specified object