This SRU has been shadowed by a security update and needs to be re-
merged.
** Changed in: apache2 (Ubuntu Trusty)
Status: Fix Committed => Triaged
** Tags removed: verification-needed
** Description changed:
- [impact]
+ [Impact]
+
When accessed long URI location that configured by AliasMatch directive,
Apache failed to allocate memory and process aborted.
It's same that https://bugzilla.redhat.com/show_bug.cgi?id=1120019.
This fixed in upstream,
http://svn.apache.org/viewvc?view=revision&revision=1583175.
Can you please backports apache 2.4.10 from vivid or just fix in trusty ?
Thanks.
- [test case]
+ [Test Case]
+
Config:
ubuntu@ubuntu:/etc/apache2$ cat sites-available/alias.conf
<VirtualHost *:80>
- AliasMatch ^/alias-test/ /var/www/html/index.html
+ AliasMatch ^/alias-test/ /var/www/html/index.html
</VirtualHost>
With old apache:
ubuntu@ubuntu:/etc/apache2$ curl localhost/alias-test/short_uri
<!doctype html>
<html>
<body>
<h1>TEST</h1>
</body>
</html>
ubuntu@ubuntu:/etc/apache2$ curl
localhost/alias-test/very_loooooooooooooooooooo
ooooooooooooooooooooooooooooooooooooooooooooong_____uri
curl: (52) Empty reply from server
ubuntu@ubuntu:/etc/apache2$
With new apache:
ubuntu@ubuntu:/etc/apache2$ curl localhost/alias-test/short_uri
<!doctype html>
<html>
<body>
<h1>TEST</h1>
</body>
</html>
ubuntu@ubuntu:/etc/apache2$ curl
localhost/alias-test/very_loooooooooooooooooooo
ooooooooooooooooooooooooooooooooooooooooooooong_____uri
<!doctype html>
<html>
<body>
<h1>TEST</h1>
</body>
</html>
- [regression potential]
- TBD
+ [Regression Potential]
+
+ There should be no regression potential for this patch, as it just
+ removes an incorrect strlen check.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1534538
Title:
AliasMatch directive does not accept long URI
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/1534538/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
