apache2: CVE-2018-1333

* fixes a race condition where aborting streams triggers an
 unnecessary timeout.

Affects apache2 2.4.18 to 2.4.30 and apache2 2.4.33

Fixed in apache2 2.4.34

Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
Jagadeesh Krishnanjanappa authored and Armin Kuster committed 2018-09-04 07:36:40 -07:00
1 parent 280157bc38
commit 086be3c7ec
3 files changed
+46

No files matched your search

@@ -10,6 +10,7 @@ inherit autotools pkgconfig native
SRC_URI = "${APACHE_MIRROR}/httpd/httpd-${PV}.tar.bz2 \
file://0001-configure-use-pkg-config-for-PCRE-detection.patch \
file://CVE-2018-1333.patch \
"
S = "${WORKDIR}/httpd-${PV}"