File _patchinfo of Package patchinfo.5205
<patchinfo incident="5205">
<issue id="1043055" tracker="bnc">Apache2 cannot handle IfModule in included config files from APACHE_CONF_INCLUDE_*</issue>
<issue id="1023616" tracker="bnc">APACHE_CONF_INCLUDE_DIRS order change wrt. loadmodules, from 13.1 to tumbleweed</issue>
<issue id="1048576" tracker="bnc">VUL-0: CVE-2017-9788: apache2: Uninitialized memory reflection in mod_auth_digest</issue>
<issue id="2017-9788" tracker="cve" />
<category>security</category>
<rating>moderate</rating>
<packager>pgajdos</packager>
<description>This update for apache2 fixes the following issues:
Security issue fixed:
- CVE-2017-9788: Uninitialized memory reflection in mod_auth_digest. (bsc#1048576)
Bug fixes:
- Include individual sysconfig.d files instead of the whole sysconfig.d directory.
- Include sysconfig.d/include.conf after httpd.conf is processed. (bsc#1023616, bsc#1043055)
</description>
<summary>Security update for apache2</summary>
</patchinfo>