httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Santosh Kumar <santoshjee...@gmail.com>
Subject [users@httpd] Need Help for back porting module mod_reqtime
Date Fri, 11 Oct 2013 06:44:48 GMT
Hello Friends,

Would need your help to port mod_reqtime into *2.0.52*

In order to provide patch for CVE-2007-6750 on top of *2.0.52*

I'm working for porting module reqtimeout,
Got to know suse followed backporting this module(
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.htm)

Followed the Below steps

1. Copied the  below files from httpd-2.4.6 apache
./modules/filters/mod_reqtimeout.c
./modules/filters/mod_reqtimeout.dsp
./modules/filters/NWGNUreqtimeout
./modules/filters/NWGNUmakefile


2. In ./modules/filters/config.m4
  Added the line "APACHE_MODULE(reqtimeout, Limit time waiting for request
from client, , , yes)"


Is there standard procedure to back port mod_reqtime.?

Is there any patch available for this CVE-2007-6750?


Thanks
Santosh jeergi

Mime
View raw message