httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 52774] RewriteRules within outgoing proxy no longer work
Date Wed, 07 Mar 2012 08:21:36 GMT
https://issues.apache.org/bugzilla/show_bug.cgi?id=52774

Kaspar Brand <asfbugz@velox.ch> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Version|2.2.14                      |2.2.22

--- Comment #5 from Kaspar Brand <asfbugz@velox.ch> 2012-03-07 08:21:36 UTC ---
(In reply to comment #4)
>         2012-02-20.111132.log:apache2 (2.2.14-5ubuntu8.7) to 2.2.14-5ubuntu8.8
> 
> Obviously, my configuration broke on 2012-02-20.

The reason is most likely this (from
http://changelogs.ubuntu.com/changelogs/pool/main/a/apache2/apache2_2.2.14-5ubuntu8.8/changelog):

  * SECURITY UPDATE: another mod_proxy reverse proxy exposure
    - debian/patches/216_CVE-2011-4317.dpatch: validate additional URIs in
      modules/mappers/mod_rewrite.c, modules/proxy/mod_proxy.c,
      server/protocol.c.
    - CVE-2011-4317

I'm tentatively setting the version to 2.2.22, as this is the official release
with the fix for CVE-2011-4317 (see r1235443).

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message