|
|
Family: Slackware Local Security Checks --> Category: infos
SSA-2006-130-01 Apache httpd redux Vulnerability Scan
Vulnerability Scan Summary
SSA-2006-130-01 Apache httpd redux
Detailed Explanation for this Vulnerability Test
New Apache packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1,
10.2, and -current to fix a bug with Apache 1.3.35 and glibc that
breaks wildcards in Include directives. It may not occur with all
versions of glibc, but it has been verified on -current (using an Include
within a file already Included causes a crash), so better to patch it
and reissue these packages just to be sure. My apologies if the last
batch of updates caused anyone undue grief... they worked here with my
(too simple?) config files.
Note that if you use mod_ssl, you'll also require the mod_ssl package
that was part of yesterday's release, and on -current you'll need the
newest PHP package (if you use PHP).
Thanks to Francesco Gringoli for bringing this issue to my attention.
Click HERE for more information and discussions on this network vulnerability scan.
|
