[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#259693: Please revert to building cgi as a module



Package: apache2-mpm-prefork
Version: 2.0.50-5

When upgrading from 2.0.49-1 I obtain this error:

Syntax error on line 1 of /etc/apache2/mods-enabled/cgi.load:
module cgi_module is built-in and can't be loaded

After deleting cgi.load and starting apache2 I thought everything was
OK. But I have now discovered browser password authentication is broken.
I understand this could be a separate issue (but keeping the build the
same will help isolate it).

According to the file list for apache2-common, cgi.load is still an
available module:
<http://packages.debian.org/cgi-bin/search_contents.pl?searchmode=filelist&word=apache2-common&version=unstable&arch=i386>
...
etc/apache2/mods-available/cgi.load
...

Mandatory/compiled-in cgi support could also reduce hardening options
(script execution is best avoided by not loading cgi functionality in
the first place).

Regards,
Adam




Reply to: