[users@httpd] FYI on mod_whatkilledus/mod_backtrace updates

2014-08-01 Thread Jeff Trawick
http://emptyhammock.com/projects/httpd/diag/ (support for 64-bit Apache httpd on Windows, improvements all around) -- Born in Roswell... married an alien... http://emptyhammock.com/

Re: [users@httpd] CVE-2014-0226 vulnerability: mod_status.so was no longer ABI-compatible

2014-08-01 Thread Eric Covener
On Fri, Aug 1, 2014 at 3:31 AM, Michele Mase' wrote: > After applying some vendor's patches (redhat and ubuntu), mod_status was > broken; as a workaround, disabling it solves the issue Does stopping and starting the server instead of restarting solve the issue? mod_status depends on httpd, and

[users@httpd] CVE-2014-0226 vulnerability: mod_status.so was no longer ABI-compatible

2014-08-01 Thread Michele Mase'
After applying some vendor's patches (redhat and ubuntu), mod_status was broken; as a workaround, disabling it solves the issue Issue solved: #LoadModule status_module modules/mod_status.so #ExtendedStatus On Issue is present: LoadModule status_module modules/mod_status.so ExtendedStatus On Is i

[users@httpd] Re: How to use ap_parse_form_data and keep request body?

2014-08-01 Thread Matt Hauck
So, I've been looking into how to do this possibly by dynamically enabling the KeptBodySize. I can't seem to use this directive directly in my config because the URLs I am working with get ProxyPass'ed to a different backend, and do not correspond to any `Directory` element, as KeptBodySize only ap