Summary: | Маленький таймаут для старта сервиса | ||
---|---|---|---|
Product: | Branch p8 | Reporter: | Sergey Novikov <sotor> |
Component: | apache2 | Assignee: | Andrey Cherepanov <cas> |
Status: | CLOSED FIXED | QA Contact: | qa-p8 <qa-p8> |
Severity: | normal | ||
Priority: | P3 | CC: | ekorneechev, rider |
Version: | не указана | ||
Hardware: | all | ||
OS: | Linux |
Description
Sergey Novikov
2017-05-18 12:28:43 MSK
apache2-1:2.4.25-alt1 -> sisyphus: Thu May 18 2017 Anton Farygin <rider@altlinux.ru> 1:2.4.25-alt1 - updated to 2.4.25 witch security fixes: + CVE-2016-8740 mod_http2: Mitigate DoS memory exhaustion via endless CONTINUATION frames. + CVE-2016-5387 core: Mitigate [f]cgi "httpoxy" issues + CVE-2016-2161 mod_auth_digest: Prevent segfaults during client entry allocation when the shared memory space is exhausted. + CVE-2016-0736 mod_session_crypto: Authenticate the session data/cookie with a MAC (SipHash) to prevent deciphering or tampering with a padding oracle attack. - increased service startup time (closes: #33491) - cleanup spec and patches |