Kristyna Streitova
1177533e53
*) SECURITY: CVE-2025-54090: Apache HTTP Server: 'RewriteCond expr'
always evaluates to true in 2.4.64 (cve.mitre.org)
A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond
expr ..." tests evaluating as "true".
Users are recommended to upgrade to version 2.4.65, which fixes
the issue.
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=721
15 lines
647 B
Diff
15 lines
647 B
Diff
Index: httpd-2.4.64/httpd-framework/t/ssl/varlookup.t
|
|
===================================================================
|
|
--- httpd-2.4.64.orig/httpd-framework/t/ssl/varlookup.t
|
|
+++ httpd-2.4.64/httpd-framework/t/ssl/varlookup.t
|
|
@@ -227,9 +227,7 @@ SSL_SERVER_S_DN_UID
|
|
SSL_CLIENT_S_DN_Email "$client_dn{$email_field}"
|
|
SSL_SERVER_S_DN_Email "$server_dn{$email_field}"
|
|
SSL_CLIENT_SAN_Email_0 "$san_email"
|
|
-SSL_SERVER_SAN_DNS_0 "$san_dns"
|
|
SSL_CLIENT_SAN_OTHER_msUPN_0 "$san_msupn"
|
|
-SSL_SERVER_SAN_OTHER_dnsSRV_0 "$san_dnssrv"
|
|
|
|
SSL_CLIENT_I_DN "$client_i_dn"
|
|
SSL_SERVER_I_DN "$server_i_dn"
|