mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-20 04:02:27 +00:00
Code Issues Releases Activity

- Add upstream commit for CVE-2017-9798

Browse Source 
- Bump PORTREVISION

Security:	76b085e2-9d33-11e7-9260-000c292ee6b8
This commit is contained in:
Ryan Steinmetz 2017-09-19 12:21:17 +00:00
parent 3bc72e930f
commit 7a2f0c1182
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=450116
2 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
www/apache24/Makefile
View File

@ -2,6 +2,7 @@
PORTNAME= apache24
PORTVERSION= 2.4.27
PORTREVISION= 1
CATEGORIES= www ipv6
MASTER_SITES= APACHE_HTTPD
DISTNAME= httpd-${PORTVERSION}

15
www/apache24/files/patch-CVE-2017-9798 Normal file
View File

@ -0,0 +1,15 @@
--- server/core.c 2017/08/16 16:50:29 1805223
+++ server/core.c 2017/09/08 13:13:11 1807754
@@ -2266,6 +2266,12 @@
/* method has not been registered yet, but resource restriction
* is always checked before method handling, so register it.
*/
+ if (cmd->pool == cmd->temp_pool) {
+ /* In .htaccess, we can't globally register new methods. */
+ return apr_psprintf(cmd->pool, "Could not register method '%s' "
+ "for %s from .htaccess configuration",
+ method, cmd->cmd->name);
+ }
methnum = ap_method_register(cmd->pool,
apr_pstrdup(cmd->pool, method));
}