diff options
| author |   Patrick J Volkerding <volkerdi@slackware.com> | 2022-03-15 00:13:59 +0000 |
|---|---|---|
| committer |   Eric Hameleers <alien@slackware.com> | 2022-03-15 13:30:00 +0100 |
| commit | 44c9fcd8776c083b8de52d292b23aca6b99a59d4 (patch) | |
| tree | 840d61c69fdd0f22921baf99bd01fdbd4f25291a /patches/source/httpd/httpd.runasapache.diff | |
| parent | 477bd290fa9a178a3db0fe07169bcad10037cdcd (diff) | |
| download | current-1b7bf61bc1fbe03738a1ae13edbed7a7542aaa4b.tar.gz current-1b7bf61bc1fbe03738a1ae13edbed7a7542aaa4b.tar.xz | |
Tue Mar 15 00:13:59 UTC 202220220315001359_15.0
patches/packages/httpd-2.4.53-x86_64-1_slack15.0.txz: Upgraded.
This update fixes bugs and the following security issues:
mod_sed: Read/write beyond bounds
core: Possible buffer overflow with very large or unlimited
LimitXMLRequestBody
HTTP request smuggling vulnerability
mod_lua: Use of uninitialized value in r:parsebody
For more information, see:
https://downloads.apache.org/httpd/CHANGES_2.4.53
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23943
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22721
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22720
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22719
(* Security fix *)
patches/packages/mozilla-firefox-91.7.1esr-x86_64-1_slack15.0.txz: Upgraded.
This release makes the following change:
Yandex and Mail.ru have been removed as optional search providers in the
drop-down search menu in Firefox.
For more information, see:
https://www.mozilla.org/en-US/firefox/91.7.1/releasenotes/
(* Security fix *)
Diffstat (limited to 'patches/source/httpd/httpd.runasapache.diff')
| -rw-r--r-- | patches/source/httpd/httpd.runasapache.diff | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/patches/source/httpd/httpd.runasapache.diff b/patches/source/httpd/httpd.runasapache.diff new file mode 100644 index 000000000..c1954ec33 --- /dev/null +++ b/patches/source/httpd/httpd.runasapache.diff @@ -0,0 +1,13 @@ +--- ./etc/httpd/httpd.conf.orig 2008-02-14 15:24:21.000000000 -0600 ++++ ./etc/httpd/httpd.conf 2008-02-14 15:34:58.000000000 -0600 +@@ -125,8 +125,8 @@ + # It is usually good practice to create a dedicated user and group for + # running httpd, as with most system services. + # +-User daemon +-Group daemon ++User apache ++Group apache + + </IfModule> + </IfModule> |