Peter Korsgaard
e8a15fd693
apache: security bump to version 2.4.26
...
Fixes the following security issues:
CVE-2017-3167: In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26,
use of the ap_get_basic_auth_pw() by third-party modules outside of the
authentication phase may lead to authentication requirements being bypassed.
CVE-2017-3169: In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26,
mod_ssl may dereference a NULL pointer when third-party modules call
ap_hook_process_connection() during an HTTP request to an HTTPS port.
CVE-2017-7659: A maliciously constructed HTTP/2 request could cause
mod_http2 to dereference a NULL pointer and crash the server process.
CVE-2017-7668: The HTTP strict parsing changes added in Apache httpd 2.2.32
and 2.4.24 introduced a bug in token list parsing, which allows
ap_find_token() to search past the end of its input string. By maliciously
crafting a sequence of request headers, an attacker may be able to cause a
segmentation fault, or to force ap_find_token() to return an incorrect
value.
CVE-2017-7679: In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26,
mod_mime can read one byte past the end of a buffer when sending a malicious
Content-Type response header.
While we're at it, use the upstream sha256 checksum instead of sha1.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2017-06-20 23:24:33 +02:00
..
2017-06-02 13:33:39 +02:00
2017-06-11 14:29:28 +02:00
2017-06-20 22:13:15 +02:00
2017-06-05 14:36:35 +02:00
2017-06-11 14:29:29 +02:00
2017-06-20 23:24:33 +02:00
2017-06-04 09:54:06 +02:00
2017-06-19 21:48:58 +02:00
2017-06-08 21:46:26 +02:00
2017-06-08 21:30:25 +02:00
2017-06-10 23:06:23 +02:00
2017-06-20 23:14:16 +02:00
2017-06-01 22:28:14 +02:00
2017-06-15 22:27:00 +02:00
2017-06-06 21:44:20 +02:00
2017-06-01 22:28:14 +02:00
2017-06-17 15:38:25 +02:00
2017-06-01 22:28:14 +02:00
2017-06-06 22:48:42 +02:00
2017-06-05 10:55:34 +02:00
2017-06-05 15:51:04 +02:00
2017-06-11 14:29:29 +02:00
2017-06-11 15:54:00 +02:00
2017-06-11 18:42:55 +02:00
2017-06-12 10:12:22 +02:00
2017-06-20 22:12:16 +02:00
2017-06-06 22:15:03 +02:00
2017-06-05 11:48:46 +02:00
2017-06-17 15:36:05 +02:00
2017-06-11 14:29:28 +02:00
2017-06-20 22:14:16 +02:00
2017-06-11 14:29:28 +02:00
2017-06-01 22:28:14 +02:00
2017-06-06 22:34:11 +02:00
2017-06-01 22:28:14 +02:00
2017-06-05 11:35:45 +02:00
2017-06-06 22:34:03 +02:00
2017-06-10 23:10:17 +02:00
2017-06-12 23:21:28 +02:00
2017-06-05 14:52:18 +02:00
2017-06-20 07:40:25 +02:00
2017-06-11 14:29:28 +02:00
2017-06-19 21:21:18 +02:00
2017-05-31 23:04:53 +02:00
2017-06-07 09:19:43 +02:00
2017-06-11 14:29:28 +02:00
2017-06-06 23:01:48 +02:00
2017-06-18 16:40:57 +02:00
2017-06-08 21:29:02 +02:00
2017-06-11 18:00:48 +02:00
2017-06-19 21:47:05 +02:00
2017-06-04 09:51:34 +02:00
2017-06-04 09:49:36 +02:00
2017-06-04 09:49:30 +02:00
2017-06-03 17:07:20 +02:00
2017-06-04 09:49:25 +02:00
2017-06-15 22:37:40 +02:00
2017-06-04 09:47:16 +02:00
2017-06-04 09:46:11 +02:00
2017-06-06 21:36:46 +02:00
2017-06-05 11:11:43 +02:00
2017-06-07 09:23:47 +02:00
2017-06-14 21:25:57 +02:00
2017-06-05 11:13:05 +02:00
2017-06-05 11:13:20 +02:00
2017-06-05 11:13:47 +02:00
2017-06-05 11:14:17 +02:00
2017-05-31 23:05:06 +02:00
2017-06-05 11:14:56 +02:00
2017-06-05 11:15:09 +02:00
2017-06-05 11:15:16 +02:00
2017-06-05 11:15:21 +02:00
2017-06-05 10:56:37 +02:00
2017-06-05 15:06:14 +02:00
2017-06-05 11:11:20 +02:00
2017-06-11 14:29:28 +02:00
2017-06-06 22:15:36 +02:00
2017-06-04 09:44:47 +02:00
2017-06-05 15:55:33 +02:00
2017-06-18 15:52:46 +02:00
2017-06-05 15:56:00 +02:00
2017-06-05 15:56:51 +02:00
2017-06-05 16:07:10 +02:00
2017-06-11 15:51:33 +02:00
2017-06-05 14:55:09 +02:00
2017-06-04 09:44:47 +02:00
2017-06-10 22:59:55 +02:00
2017-06-05 10:06:20 +02:00
2017-06-05 15:09:00 +02:00
2017-06-19 22:06:15 +02:00
2017-06-20 23:09:49 +02:00
2017-06-10 23:00:45 +02:00
2017-06-07 09:27:11 +02:00
2017-06-08 23:35:26 +02:00
2017-06-20 23:13:25 +02:00
2017-06-11 14:29:29 +02:00
2017-06-11 14:29:29 +02:00
2017-06-11 17:51:50 +02:00
2017-06-03 17:09:21 +02:00
2017-06-05 16:07:55 +02:00
2017-06-18 15:53:24 +02:00
2017-06-11 14:29:28 +02:00
2017-06-11 14:29:28 +02:00
2017-06-04 09:53:47 +02:00
2017-06-11 14:29:28 +02:00
2017-06-06 17:18:32 +02:00
2017-06-07 09:23:09 +02:00
2017-06-04 09:38:01 +02:00
2017-06-05 14:36:19 +02:00
2017-06-11 14:29:28 +02:00
2017-06-05 11:55:17 +02:00
2017-06-15 10:31:40 +02:00
2017-06-15 22:05:35 +02:00
2017-06-15 22:05:35 +02:00
2017-06-20 22:14:33 +02:00
2017-06-11 14:29:29 +02:00
2017-06-11 14:29:29 +02:00
2017-06-12 23:43:41 +02:00
2017-06-11 14:29:29 +02:00
2017-06-20 22:07:32 +02:00
2017-06-11 14:29:29 +02:00
2017-06-18 16:39:58 +02:00
2017-06-07 21:57:33 +02:00
2017-06-07 22:03:11 +02:00
2017-06-20 22:13:43 +02:00
2017-06-15 22:03:32 +02:00
2017-06-11 14:29:29 +02:00
2017-06-17 16:15:23 +02:00
2017-06-17 16:17:04 +02:00
2017-06-19 21:42:54 +02:00
2017-06-11 15:57:16 +02:00
2017-06-20 22:12:16 +02:00
2017-06-20 22:15:06 +02:00
2017-06-11 18:37:54 +02:00
2017-06-01 22:28:14 +02:00
2017-06-11 14:29:29 +02:00
2017-05-31 23:27:15 +02:00
2017-06-12 10:09:38 +02:00
2017-06-05 15:46:50 +02:00
2017-06-17 15:08:02 +02:00
2017-06-10 23:01:44 +02:00
2017-06-11 14:29:29 +02:00
2017-06-01 22:28:14 +02:00
2017-06-01 22:28:14 +02:00
2017-06-20 22:32:36 +02:00
2017-06-02 13:32:44 +02:00
2017-06-04 09:55:10 +02:00
2017-06-11 14:29:29 +02:00
2017-06-01 22:28:14 +02:00
2017-06-20 10:43:20 +02:00
2017-06-19 22:11:10 +02:00
2017-06-20 22:14:52 +02:00
2017-06-05 14:36:52 +02:00
2017-06-03 18:57:30 +02:00
2017-06-04 09:44:47 +02:00
2017-06-11 14:29:29 +02:00
2017-06-08 23:24:23 +02:00
2017-06-06 21:37:11 +02:00
2017-06-10 23:03:52 +02:00
2017-05-31 23:34:28 +02:00
2017-05-31 23:35:03 +02:00
2017-05-31 23:35:14 +02:00
2017-05-31 23:35:20 +02:00
2017-05-31 23:35:26 +02:00
2017-05-31 23:35:39 +02:00
2017-05-31 23:35:42 +02:00
2017-06-02 08:40:39 +02:00
2017-06-20 22:12:16 +02:00
2017-06-11 14:29:29 +02:00
2017-06-15 23:03:27 +02:00
2017-06-12 23:46:57 +02:00
2017-06-15 22:28:48 +02:00
2017-06-09 11:42:17 +02:00
2017-06-20 21:54:27 +02:00
2017-06-20 21:56:00 +02:00
2017-06-02 13:33:05 +02:00
2017-06-17 16:16:40 +02:00
2017-06-15 23:08:32 +02:00
2017-06-11 14:55:47 +02:00
2017-06-05 15:51:04 +02:00
2017-06-15 22:37:02 +02:00
2017-06-15 22:49:58 +02:00
2017-06-15 23:00:09 +02:00
2017-06-20 21:53:53 +02:00
2017-06-10 23:06:22 +02:00
2017-06-02 13:33:10 +02:00
2017-06-15 22:48:32 +02:00
2017-06-15 22:29:22 +02:00
2017-06-11 14:47:29 +02:00
2017-06-05 15:51:04 +02:00
2017-06-20 21:50:32 +02:00
2017-06-15 22:47:31 +02:00
2017-06-20 22:12:16 +02:00
2017-06-11 15:53:06 +02:00
2017-06-11 14:29:29 +02:00
2017-06-06 22:58:35 +02:00
2017-06-01 22:28:14 +02:00
2017-06-06 23:38:04 +02:00
2017-06-06 22:47:05 +02:00
2017-06-11 14:29:29 +02:00
2017-05-31 23:13:05 +02:00
2017-05-31 23:16:32 +02:00
2017-06-08 21:33:10 +02:00
2017-06-08 22:03:01 +02:00
2017-06-02 13:32:25 +02:00
2017-06-06 23:02:45 +02:00
2017-06-02 13:31:05 +02:00
2017-06-11 14:29:29 +02:00
2017-06-20 22:13:03 +02:00
2017-06-10 23:09:46 +02:00
2017-06-02 13:30:17 +02:00
2017-06-02 13:30:49 +02:00
2017-06-10 23:02:53 +02:00
2017-06-11 14:39:18 +02:00
2017-06-07 21:50:10 +02:00
2017-06-04 09:46:46 +02:00
2017-06-12 10:10:11 +02:00
2017-06-11 14:29:29 +02:00
2017-06-19 21:49:35 +02:00
2017-06-20 21:25:39 +02:00
2017-06-03 17:07:13 +02:00
2017-06-02 13:31:48 +02:00
2017-06-07 22:54:22 +02:00
2017-06-20 22:30:57 +02:00
2017-06-01 22:28:14 +02:00
2017-06-20 21:54:27 +02:00
2017-06-15 11:52:57 +02:00
2017-06-11 14:28:17 +02:00