Bug#259693: Please revert to building cgi as a module
Package: apache2-mpm-prefork
Version: 2.0.50-5
When upgrading from 2.0.49-1 I obtain this error:
Syntax error on line 1 of /etc/apache2/mods-enabled/cgi.load:
module cgi_module is built-in and can't be loaded
After deleting cgi.load and starting apache2 I thought everything was
OK. But I have now discovered browser password authentication is broken.
I understand this could be a separate issue (but keeping the build the
same will help isolate it).
According to the file list for apache2-common, cgi.load is still an
available module:
<http://packages.debian.org/cgi-bin/search_contents.pl?searchmode=filelist&word=apache2-common&version=unstable&arch=i386>
...
etc/apache2/mods-available/cgi.load
...
Mandatory/compiled-in cgi support could also reduce hardening options
(script execution is best avoided by not loading cgi functionality in
the first place).
Regards,
Adam
Reply to: