https://bz.apache.org/bugzilla/show_bug.cgi?id=64919

--- Comment #18 from Furan <[email protected]> ---
Quick follow up because I found a band-aid way around the rebuild problem. You
can skip rebuilding Apache and just replace the fpm module.

I copied the scanner bits Ethans patch changes
(ap_scan_script_header_err_core_ex, getsfunc_BRIGADE and the cookie helper from
util_script.c) straight into mod_proxy_fcgi.c as statics, swapped the fixed 8K
buffer for one sized off responsefieldsize, then built just that file with apxs
against the stock apache2-dev headers for my target OS. Then I dropped the
resulting .so in over the packaged one with dpkg-divert.

I chose this way because the module is less likely to require changes for CVEs
compared to apache as a whole getting patch/minor updates and BC is rarely an
issue for this. It's not the best way forward, but it certainly got me out of
the problem quicker in a way I was happy with for now while I wait on an
upstream fix.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to