Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of covener@gmail.com designates
 209.85.213.178 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CAC=HunseOneq3nOoVbSSADMPVgTpDeihHYOu+95b66fLUT2Qow@mail.gmail.com>
References: 
 <CAC=HunseOneq3nOoVbSSADMPVgTpDeihHYOu+95b66fLUT2Qow@mail.gmail.com>
Date: Fri, 1 Aug 2014 08:04:57 -0400
Message-ID: 
 <CALK=YjO44skvFhmxX7wdeYkuocboPiyX0-ayuvW3cmk4FQv+8w@mail.gmail.com>
From: Eric Covener <covener@gmail.com>
To: users@httpd.apache.org
Content-Type: text/plain; charset=UTF-8
Subject: Re: [users@httpd] CVE-2014-0226 vulnerability: mod_status.so was no
 longer ABI-compatible

On Fri, Aug 1, 2014 at 3:31 AM, Michele Mase' <michele.mase@gmail.com> wrote:
> After applying some vendor's patches (redhat and ubuntu), mod_status was
> broken; as a workaround, disabling it solves the issue

Does stopping and starting the server instead of restarting solve the
issue?   mod_status depends on httpd, and you're updating a running
httpd and sending it a signal to re-read its configuration. You aren't
actually running 2.4.10 after a restart.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org