Sebastian Kemper d4addd14c0 apache: security bump to 2.4.46 ...

From CHANGES_2.4:

SECURITY: CVE-2020-11984 (cve.mitre.org)
  mod_proxy_uwsgi: Malicious request may result in information disclosure
  or RCE of existing file on the server running under a malicious process
  environment. [Yann Ylavic]

SECURITY: CVE-2020-11993 (cve.mitre.org)
  mod_http2: when throttling connection requests, log statements
  where possibly made that result in concurrent, unsafe use of
  a memory pool. [Stefan Eissing]

SECURITY:
  mod_http2: a specially crafted value for the 'Cache-Digest' header
  request would result in a crash when the server actually tries
  to HTTP/2 PUSH a resource afterwards.
  [Stefan Eissing, Eric Covener, Christophe Jaillet]

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

2020-08-08 16:15:46 +02:00

..

files

apache: create log directory o=

2020-05-16 14:24:05 +02:00

patches

apache: security bump to 2.4.43

2020-04-05 20:42:29 +02:00

Makefile

apache: security bump to 2.4.46

2020-08-08 16:15:46 +02:00