List ecs-isp@2rosenthals.com Arkiverade meddelande #361

Från: "Paul Smedley" <ecs-isp@2rosenthals.com> Meddelandehuvud
Oavkodat meddelande
Ämne: Re: [eCS-ISP] Apache 2.4.49 zero day exploit...
Datum: Wed, 6 Oct 2021 14:55:45 +1030
Till: eCS ISP Mailing List <ecs-isp@2rosenthals.com>

I'll build 2.4.50 as soon as I resolve the issues with APR and using the tcpip 4.1 interface, but meanwhile anyone concerned should roll back to 2.4.48

Cheers,

Paul

On Wed, 6 Oct 2021, 06:38 Roderick Klein, <ecs-isp@2rosenthals.com> wrote:
On  2-10-21 11:42, Paul Smedley wrote:
>
> Hi All,
>
> The key changes with these is that apache2 has been updated to pull in
> the socket functions from tcpip32.dll rather than so32dll.dll.
>
> I don't expect this to make any significant differences in real life,
> other than it slightly simplifies the build process.
>
> https://smedley.id.au/tmp/php-8.0.9-os2-20211002.zip
> https://smedley.id.au/tmp/httpd-2.4.49-os2-20211002-debug.zip

It seems this Apache version has a zero day exploit.

https://therecord.media/apache-fixes-actively-exploited-web-server-zero-day/

Roderick


=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
This message is sent to you because you are subscribed to
  the mailing list <ecs-isp@2rosenthals.com>.
To unsubscribe, E-mail to: <ecs-isp-off@2rosenthals.com>
To switch to the DIGEST mode, E-mail to <ecs-isp-digest@2rosenthals.com>
To switch to the INDEX mode, E-mail to <ecs-isp-index@2rosenthals.com>
Send administrative queries to  <ecs-isp-request@2rosenthals.com>
To subscribe (new addresses), E-mail to: <ecs-isp-on@2rosenthals.com> and reply to the confirmation email.
Web archives are publicly available at: http://lists.2rosenthals.com

This list is hosted by Rosenthal & Rosenthal, LLC
P.O. Box 281, Deer Park, NY 11729-0281. Non-
electronic communications related to content
contained in these messages should be directed
to the above address. (CAN-SPAM Act of 2003)

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=


Prenumerera: Sändning, Uppsamling, Index.
Stoppa prenumeration
Meddelande till ListMaster