forked from pool/apache2
9ac936a203
*) SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
mod_rewrite in server/vhost context on Windows (cve.mitre.org)
[boo#1228098]
SSRF in Apache HTTP Server on Windows with mod_rewrite in
server/vhost context, allows to potentially leak NTML hashes to
a malicious server via SSRF and malicious requests.
Users are recommended to upgrade to version 2.4.62 which fixes
this issue.
Credits: Smi1e (DBAPPSecurity Ltd.)
*) SECURITY: CVE-2024-40725: Apache HTTP Server: source code
disclosure with handlers configured via AddType (cve.mitre.org)
[boo#1228097]
A partial fix for CVE-2024-39884 in the core of Apache HTTP
Server 2.4.61 ignores some use of the legacy content-type based
configuration of handlers. "AddType" and similar configuration,
under some circumstances where files are requested indirectly,
result in source code disclosure of local content. For example,
PHP scripts may be served instead of interpreted.
Users are recommended to upgrade to version 2.4.62, which fixes
this issue.
*) mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO, SCRIPT_NAME) for
"balancer:" URLs set via SetHandler, also allowing for "unix:" sockets
with BalancerMember(s). PR 69168. [Yann Ylavic]
*) mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:" URLs.
PR 69160 [Yann Ylavic]
*) mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
[Joe Orton]
*) mod_ssl: Add support for loading certs/keys from pkcs11: URIs
via OpenSSL 3.x providers. [Ingo Franzki <ifranzki linux.ibm.com>]
*) mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL >= 3.0.
[Ruediger Pluem, Yann Ylavic]
*) mpm_worker: Fix possible warning (AH00045) about children processes not
terminating timely. [Yann Ylavic]
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=706
76 lines
6.0 KiB
Plaintext
76 lines
6.0 KiB
Plaintext
<IfModule prefork.c>
|
|
LoadModule actions_module /usr/lib64/apache2-prefork/mod_actions.so
|
|
LoadModule alias_module /usr/lib64/apache2-prefork/mod_alias.so
|
|
LoadModule auth_basic_module /usr/lib64/apache2-prefork/mod_auth_basic.so
|
|
LoadModule authn_file_module /usr/lib64/apache2-prefork/mod_authn_file.so
|
|
LoadModule authz_host_module /usr/lib64/apache2-prefork/mod_authz_host.so
|
|
LoadModule authz_groupfile_module /usr/lib64/apache2-prefork/mod_authz_groupfile.so
|
|
LoadModule authz_user_module /usr/lib64/apache2-prefork/mod_authz_user.so
|
|
LoadModule autoindex_module /usr/lib64/apache2-prefork/mod_autoindex.so
|
|
LoadModule cgi_module /usr/lib64/apache2-prefork/mod_cgi.so
|
|
LoadModule dir_module /usr/lib64/apache2-prefork/mod_dir.so
|
|
LoadModule env_module /usr/lib64/apache2-prefork/mod_env.so
|
|
LoadModule expires_module /usr/lib64/apache2-prefork/mod_expires.so
|
|
LoadModule include_module /usr/lib64/apache2-prefork/mod_include.so
|
|
LoadModule log_config_module /usr/lib64/apache2-prefork/mod_log_config.so
|
|
LoadModule mime_module /usr/lib64/apache2-prefork/mod_mime.so
|
|
LoadModule negotiation_module /usr/lib64/apache2-prefork/mod_negotiation.so
|
|
LoadModule setenvif_module /usr/lib64/apache2-prefork/mod_setenvif.so
|
|
LoadModule ssl_module /usr/lib64/apache2-prefork/mod_ssl.so
|
|
LoadModule socache_shmcb_module /usr/lib64/apache2-prefork/mod_socache_shmcb.so
|
|
LoadModule userdir_module /usr/lib64/apache2-prefork/mod_userdir.so
|
|
LoadModule reqtimeout_module /usr/lib64/apache2-prefork/mod_reqtimeout.so
|
|
LoadModule authn_core_module /usr/lib64/apache2-prefork/mod_authn_core.so
|
|
LoadModule authz_core_module /usr/lib64/apache2-prefork/mod_authz_core.so
|
|
</IfModule>
|
|
<IfModule worker.c>
|
|
LoadModule actions_module /usr/lib64/apache2-worker/mod_actions.so
|
|
LoadModule alias_module /usr/lib64/apache2-worker/mod_alias.so
|
|
LoadModule auth_basic_module /usr/lib64/apache2-worker/mod_auth_basic.so
|
|
LoadModule authn_file_module /usr/lib64/apache2-worker/mod_authn_file.so
|
|
LoadModule authz_host_module /usr/lib64/apache2-worker/mod_authz_host.so
|
|
LoadModule authz_groupfile_module /usr/lib64/apache2-worker/mod_authz_groupfile.so
|
|
LoadModule authz_user_module /usr/lib64/apache2-worker/mod_authz_user.so
|
|
LoadModule autoindex_module /usr/lib64/apache2-worker/mod_autoindex.so
|
|
LoadModule cgi_module /usr/lib64/apache2-worker/mod_cgi.so
|
|
LoadModule dir_module /usr/lib64/apache2-worker/mod_dir.so
|
|
LoadModule env_module /usr/lib64/apache2-worker/mod_env.so
|
|
LoadModule expires_module /usr/lib64/apache2-worker/mod_expires.so
|
|
LoadModule include_module /usr/lib64/apache2-worker/mod_include.so
|
|
LoadModule log_config_module /usr/lib64/apache2-worker/mod_log_config.so
|
|
LoadModule mime_module /usr/lib64/apache2-worker/mod_mime.so
|
|
LoadModule negotiation_module /usr/lib64/apache2-worker/mod_negotiation.so
|
|
LoadModule setenvif_module /usr/lib64/apache2-worker/mod_setenvif.so
|
|
LoadModule ssl_module /usr/lib64/apache2-worker/mod_ssl.so
|
|
LoadModule socache_shmcb_module /usr/lib64/apache2-worker/mod_socache_shmcb.so
|
|
LoadModule userdir_module /usr/lib64/apache2-worker/mod_userdir.so
|
|
LoadModule reqtimeout_module /usr/lib64/apache2-worker/mod_reqtimeout.so
|
|
LoadModule authn_core_module /usr/lib64/apache2-worker/mod_authn_core.so
|
|
LoadModule authz_core_module /usr/lib64/apache2-worker/mod_authz_core.so
|
|
</IfModule>
|
|
<IfModule event.c>
|
|
LoadModule actions_module /usr/lib64/apache2-event/mod_actions.so
|
|
LoadModule alias_module /usr/lib64/apache2-event/mod_alias.so
|
|
LoadModule auth_basic_module /usr/lib64/apache2-event/mod_auth_basic.so
|
|
LoadModule authn_file_module /usr/lib64/apache2-event/mod_authn_file.so
|
|
LoadModule authz_host_module /usr/lib64/apache2-event/mod_authz_host.so
|
|
LoadModule authz_groupfile_module /usr/lib64/apache2-event/mod_authz_groupfile.so
|
|
LoadModule authz_user_module /usr/lib64/apache2-event/mod_authz_user.so
|
|
LoadModule autoindex_module /usr/lib64/apache2-event/mod_autoindex.so
|
|
LoadModule cgi_module /usr/lib64/apache2-event/mod_cgi.so
|
|
LoadModule dir_module /usr/lib64/apache2-event/mod_dir.so
|
|
LoadModule env_module /usr/lib64/apache2-event/mod_env.so
|
|
LoadModule expires_module /usr/lib64/apache2-event/mod_expires.so
|
|
LoadModule include_module /usr/lib64/apache2-event/mod_include.so
|
|
LoadModule log_config_module /usr/lib64/apache2-event/mod_log_config.so
|
|
LoadModule mime_module /usr/lib64/apache2-event/mod_mime.so
|
|
LoadModule negotiation_module /usr/lib64/apache2-event/mod_negotiation.so
|
|
LoadModule setenvif_module /usr/lib64/apache2-event/mod_setenvif.so
|
|
LoadModule ssl_module /usr/lib64/apache2-event/mod_ssl.so
|
|
LoadModule socache_shmcb_module /usr/lib64/apache2-event/mod_socache_shmcb.so
|
|
LoadModule userdir_module /usr/lib64/apache2-event/mod_userdir.so
|
|
LoadModule reqtimeout_module /usr/lib64/apache2-event/mod_reqtimeout.so
|
|
LoadModule authn_core_module /usr/lib64/apache2-event/mod_authn_core.so
|
|
LoadModule authz_core_module /usr/lib64/apache2-event/mod_authz_core.so
|
|
</IfModule>
|