dac09acc90
Resolves: RHEL-186226 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) Resolves: RHEL-182580 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) Resolves: RHEL-186187 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) Resolves: RHEL-175632 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) Resolves: RHEL-186189 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) Resolves: RHEL-186156 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) Resolves: RHEL-191249 - httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime (CVE-2026-43951) Resolves: RHEL-193128 - httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server (CVE-2026-44186) Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-44119
32 lines
1011 B
Diff
32 lines
1011 B
Diff
From c3187fb6dd4175d90e84482d047c4366dc14604f Mon Sep 17 00:00:00 2001
|
|
From: Joe Orton <jorton@apache.org>
|
|
Date: Wed, 3 Jun 2026 10:43:09 +0000
|
|
Subject: [PATCH] * modules/ssl/ssl_util_ocsp.c (send_request): Increase wbuf
|
|
with the len read by apr_socket_send
|
|
|
|
Submitted by: gbechis
|
|
Github: closes #603
|
|
|
|
|
|
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1934918 13f79535-47bb-0310-9956-ffa450edef68
|
|
---
|
|
modules/ssl/ssl_util_ocsp.c | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/modules/ssl/ssl_util_ocsp.c b/modules/ssl/ssl_util_ocsp.c
|
|
index a202a72ee1..9dd12cfe9c 100644
|
|
--- a/modules/ssl/ssl_util_ocsp.c
|
|
+++ b/modules/ssl/ssl_util_ocsp.c
|
|
@@ -133,7 +133,7 @@ static apr_socket_t *send_request(BIO *request, const apr_uri_t *uri,
|
|
apr_size_t wlen = remain;
|
|
|
|
rv = apr_socket_send(sd, wbuf, &wlen);
|
|
- wbuf += remain;
|
|
+ wbuf += wlen;
|
|
remain -= wlen;
|
|
} while (rv == APR_SUCCESS && remain > 0);
|
|
|
|
--
|
|
2.52.0
|
|
|