diff options
Diffstat (limited to 'debian/patches/CVE-2019-10098.patch')
| -rw-r--r-- | debian/patches/CVE-2019-10098.patch | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/debian/patches/CVE-2019-10098.patch b/debian/patches/CVE-2019-10098.patch new file mode 100644 index 0000000..b2c66b2 --- /dev/null +++ b/debian/patches/CVE-2019-10098.patch @@ -0,0 +1,20 @@ +Description: patch to set PCRE_DOTALL by default +Author: ylavic +Origin: upstream, https://svn.apache.org/viewvc?view=revision&revision=1864192 +Bug: https://security-tracker.debian.org/tracker/CVE-2019-10098 +Forwarded: not-needed +Reviewed-By: Xavier Guimard <yadd@debian.org> +Last-Update: 2019-08-18 + +--- a/server/util_pcre.c ++++ b/server/util_pcre.c +@@ -120,7 +120,8 @@ + * Compile a regular expression * + *************************************************/ + +-static int default_cflags = AP_REG_DOLLAR_ENDONLY; ++static int default_cflags = AP_REG_DOTALL | ++ AP_REG_DOLLAR_ENDONLY; + + AP_DECLARE(int) ap_regcomp_get_default_cflags(void) + { |