Emanuele Cappello
emanuelecappello
Member of the groups
- maintenance-opensuse.org 18 tasks
- reactive-security 0 tasks
- security-team 3 tasks
Involved Projects and Packages
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer
This update fixes several security issues in the Apache2 webserver.
CVE-2011-3368, CVE-2011-4317: This update also includes several fixes for a mod_proxy reverse exposure via RewriteRule or ProxyPassMatch directives.
CVE-2011-3607: Integer overflow in ap_pregsub function resulting in a heap based buffer overflow could potentially allow local attackers to gain privileges
In addition to that the following changes were made:
- new template file: /etc/apache2/vhosts.d/vhost-ssl.template
allow TLSv1 only, browser match stuff commented out.
- rc script /etc/init.d/apache2: handle reload with deleted binaries
by message to stdout only, but refrain from sending signals.
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer
Maintainer