- use grep -E for egrep characters on redirections without the "NE" flag. * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy - Update to 2.4.56: - Remove references to README.QUICKSTART and point them to to vendor specific directory /usr/etc/logrotate.d. - Align some defaults in apache2-server-tuning.conf to upstream defaults: - httpd-2.4.x-fate317766-config-control-two-protocol-options.diff to honour net.core.somaxconn sysctl as the mandatory limit. the old value of 511 was never used as until v5.4-rc6 it was clamped to 128, in current kernels the default limit is 4096. and we should just set the value for the environment variable this type of map is present in the configuration. PR62311. missed to signal it the normal way (eos buckets). Addresses github issues and https://github.com/icing/mod_h2/issues/170. [Stefan Eissing] * %check: do not load all modules, just use default loadmodule.conf; some - Add which and w3m as dependencies. poo#28406 - Replace references to /var/adm/fillup-templates with new * consider also case when hostname does return empty string or - make the package runable on non systemd systems - drop upstreamed patch: - updated to 2.4.26: This release of Apache is a security, feature, - update to 2.4.25: fixed several security issues (CVE-2016-8740, fixes and improvements of mod_http2 and other modules; see CHANGES - verify tarball: added httpd*.bz2.asc, apache2.keyring and remove - readd the support of multiple entries in APACHE_ACCESS_LOG * HttpExpectStrict - allow admin to control whether we must OBS-URL: https://build.opensuse.org/request/show/1142224 OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=696
24 lines
918 B
Bash
24 lines
918 B
Bash
#!/bin/sh
|
|
|
|
# check_forensic <forensic log file>
|
|
# Author: Peter Poeml <apache@suse.de>
|
|
|
|
# check the forensic log for requests that did not complete
|
|
# output the request log for each one
|
|
|
|
# This script is based on Ben Laurie's check_forensic, but is adjusted for GNU
|
|
# tools (as used on Linux) and it works in a safe tmpdir directory.
|
|
# todo: rewrite in a form that allows running on more operating systems.
|
|
|
|
F=${1:?give filename as argument. cannot read from stdin.}
|
|
|
|
tmpprefix=${TMPDIR:-/tmp}/check_forensic.XXXXXX
|
|
tdir=$(mktemp -d $tmpprefix); test $? = 0 || { echo >&2 Could not create tmpdir. Exiting; exit 1; }
|
|
|
|
cut -f 1 -d '|' $F > $tdir/fc-all.$$
|
|
grep ^+ < $tdir/fc-all.$$ | cut -c2- | sort > $tdir/fc-in.$$
|
|
grep -- ^- < $tdir/fc-all.$$ | cut -c2- | sort > $tdir/fc-out.$$
|
|
join -v 1 $tdir/fc-in.$$ $tdir/fc-out.$$ | xargs -ixx grep -E "^\\+xx" $F
|
|
rm $tdir/fc-all.$$ $tdir/fc-in.$$ $tdir/fc-out.$$
|
|
rmdir $tdir
|