Meta Configuration of openSUSE:Maintenance:107

Overview Repositories Monitor Requests Users Subprojects Project Config Attributes Signing Keys Meta Status Pulse

Meta Configuration of openSUSE:Maintenance:107

<project name="openSUSE:Maintenance:107" kind="maintenance_incident">
  <title>apache2 security update</title>
  <description>This update fixes several security issues in the Apache2 webserver.

CVE-2011-3368, CVE-2011-4317: This update also includes several fixes for a mod_proxy reverse exposure via RewriteRule or ProxyPassMatch directives.

CVE-2011-3607: Integer overflow in ap_pregsub function resulting in a heap based buffer overflow could potentially allow local attackers to gain privileges

In addition to that the following changes were made:

- new template file: /etc/apache2/vhosts.d/vhost-ssl.template
allow TLSv1 only, browser match stuff commented out.
- rc script /etc/init.d/apache2: handle reload with deleted binaries
by message to stdout only, but refrain from sending signals.
- httpd-2.2.x-bnc727071-mod_authnz_ldap-utf8.diff: make non-ascii
eg UTF8 passwords work with mod_authnz_ldap. [bnc#727071]
</description>
  <group groupid="maintenance-opensuse.org" role="maintainer"/>
  <group groupid="autobuild-team" role="reviewer"/>
  <build>
    <disable/>
  </build>
</project>

Places

Meta Configuration of openSUSE:Maintenance:107

Places