Kristyna Streitova
1177533e53
*) SECURITY: CVE-2025-54090: Apache HTTP Server: 'RewriteCond expr'
always evaluates to true in 2.4.64 (cve.mitre.org)
A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond
expr ..." tests evaluating as "true".
Users are recommended to upgrade to version 2.4.65, which fixes
the issue.
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=721
56 lines
1.5 KiB
Plaintext
56 lines
1.5 KiB
Plaintext
#
|
|
# UserDir: The name of the directory that is appended onto a user's home
|
|
# directory if a ~user request is received.
|
|
#
|
|
|
|
<IfModule mod_userdir.c>
|
|
# Note that the name of the user directory ("public_html") cannot easily be
|
|
# changed here, since it is a compile time setting. The apache package
|
|
# would have to be rebuilt. You could work around by deleting
|
|
# /usr/sbin/suexec, but then all scripts from the directories would be
|
|
# executed with the UID of the webserver.
|
|
#
|
|
# To rebuild apache with another setting you need to change the
|
|
# %userdir define in the spec file.
|
|
|
|
# not every user's directory should be visible:
|
|
UserDir disabled root
|
|
|
|
# to enable UserDir only for a certain set of users, use this instead:
|
|
#UserDir disabled
|
|
#UserDir enabled user1 user2
|
|
|
|
|
|
# the UserDir directive is actually used inside the virtual hosts, to
|
|
# have more control
|
|
#UserDir public_html
|
|
|
|
<Directory /home/*/public_html>
|
|
|
|
AllowOverride FileInfo AuthConfig Limit Indexes
|
|
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
|
|
|
|
<Limit GET POST OPTIONS PROPFIND>
|
|
<IfModule !mod_access_compat.c>
|
|
Require all granted
|
|
</IfModule>
|
|
<IfModule mod_access_compat.c>
|
|
Order allow,deny
|
|
Allow from all
|
|
</IfModule>
|
|
</Limit>
|
|
|
|
<LimitExcept GET POST OPTIONS PROPFIND>
|
|
<IfModule !mod_access_compat.c>
|
|
Require all denied
|
|
</IfModule>
|
|
<IfModule mod_access_compat.c>
|
|
Order deny,allow
|
|
Deny from all
|
|
</IfModule>
|
|
</LimitExcept>
|
|
|
|
</Directory>
|
|
|
|
</IfModule>
|