Kristyna Streitova
1177533e53
*) SECURITY: CVE-2025-54090: Apache HTTP Server: 'RewriteCond expr'
always evaluates to true in 2.4.64 (cve.mitre.org)
A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond
expr ..." tests evaluating as "true".
Users are recommended to upgrade to version 2.4.65, which fixes
the issue.
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=721
13 lines
549 B
Diff
13 lines
549 B
Diff
Index: httpd-2.4.64/httpd-framework/t/conf/extra.conf.in
|
|
===================================================================
|
|
--- httpd-2.4.64.orig/httpd-framework/t/conf/extra.conf.in
|
|
+++ httpd-2.4.64/httpd-framework/t/conf/extra.conf.in
|
|
@@ -983,6 +983,7 @@ LimitRequestFields 32
|
|
</IfModule>
|
|
</Directory>
|
|
<Directory @SERVERROOT@/htdocs/modules/filter/bytype>
|
|
+ AddType application/xml .xml
|
|
<IfModule mod_deflate.c>
|
|
AddOutputFilterByType DEFLATE application/xml
|
|
AddOutputFilterByType DEFLATE text/xml
|