[prev in list] [next in list] [prev in thread] [next in thread] 

List:       macports-dev
Subject:    Re: [MacPorts] #38452: PHP code disclosure vulnerability with apache2 and other web servers (was: Ap
From:       Bradley Giesbrecht <pixilla () macports ! org>
Date:       2013-03-22 20:03:36
Message-ID: 73975779-0CE9-4FE1-93FA-7E9D5D6D029C () macports ! org
[Download RAW message or body]


On Mar 22, 2013, at 7:08 AM, Daniel J. Luke wrote:

> On Mar 21, 2013, at 6:14 PM, Ryan Schmidt <ryandesign@macports.org> wrote:
> > On Mar 21, 2013, at 11:53, Bradley Giesbrecht wrote:
> > > Compiling and installing mod_hfs_apple.so from here did not work for me:
> > > http://opensource.apple.com/source/apache_mod_hfs_apple/apache_mod_hfs_apple-11/
> > >  
> > > However, copying Apples mod_hfs_apple.so from a Mac OS X Server does appear to \
> > > solve the problem.
> > 
> > I'm not surprised, since the vulnerability was reported this year, and the above \
> > code was last modified in 2011. 
> > https://trac.macports.org/ticket/38452#comment:11
> 
> 
> Can we maybe find out if a newer version of mod_hfs_apple is in the process of \
> being posted to opensource.apple.com? (and then get a portfile written for it?)


+1

Regards,
Bradley Giesbrecht (pixilla)

_______________________________________________
macports-dev mailing list
macports-dev@lists.macosforge.org
https://lists.macosforge.org/mailman/listinfo/macports-dev


[prev in list] [next in list] [prev in thread] [next in thread]