Re: [gentoo-user] apache2 AddHandler/SetHandler vulnerability

2015-04-26 Thread Mick
On Sunday 26 Apr 2015 01:51:37 Michael Orlitzky wrote: On 04/25/2015 05:23 PM, Grant wrote: I read about this vulnerability in the 2015-04-06-apache-addhandler-addtype Gentoo news item. I don't think I'm using any functionality that could expose me to the problem but I'd like to be able

Re: [gentoo-user] apache2 AddHandler/SetHandler vulnerability

2015-04-26 Thread Michael Orlitzky
On 04/26/2015 05:48 PM, Mick wrote: When you say macro, is this something the webapp -U will apply, or is this some of your own brew of scripts and if so where do you apply it? Either www-apache/mod_macro with apache-2.2, or the built-in version with apache-2.4:

Re: [gentoo-user] apache2 AddHandler/SetHandler vulnerability

2015-04-26 Thread Mick
On Sunday 26 Apr 2015 18:14:32 Michael Orlitzky wrote: On 04/26/2015 04:04 AM, Mick wrote: Hmm ... I am probably affected by this change too. Running find for '*.php.*' et al, comes up with a tonne of files like this:

Re: [gentoo-user] apache2 AddHandler/SetHandler vulnerability

2015-04-26 Thread Grant
I read about this vulnerability in the 2015-04-06-apache-addhandler-addtype Gentoo news item. I don't think I'm using any functionality that could expose me to the problem but I'd like to be able to say so for sure. Does the fact that I'm up-to-date with GLSAs, I don't have PHP5 in

Re: [gentoo-user] apache2 AddHandler/SetHandler vulnerability

2015-04-26 Thread Michael Orlitzky
On 04/26/2015 04:04 AM, Mick wrote: Hmm ... I am probably affected by this change too. Running find for '*.php.*' et al, comes up with a tonne of files like this: /var/www/My_Website_Name/htdocs/modules/simpletest/tests/upgrade/drupal-7.filled.minimal.database.php.gz If I were to

Re: [gentoo-user] apache2 AddHandler/SetHandler vulnerability

2015-04-25 Thread Michael Orlitzky
On 04/25/2015 05:23 PM, Grant wrote: I read about this vulnerability in the 2015-04-06-apache-addhandler-addtype Gentoo news item. I don't think I'm using any functionality that could expose me to the problem but I'd like to be able to say so for sure. Does the fact that I'm up-to-date with