[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#388444: apache: MUST NOT send data in an 304 reply



Package: apache2
Version: Version: 1.3.34-4
Severity: normal
Tags: upstream

See the report 
    http://bugs.debian.org/388443
against apache2 for the details. The same problem exists in Apache 1.3,
too. Basically, apache must not return a message-body if the reply code
is set to 304 "not modified". But this happens if the code is set by a
php or cgi-bin script e.g.

| <?php
| header('HTTP/1.0 304 Not Modified');
| ?>
| Hello World

    Christoph

-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17.13
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages apache depends on:
ii  apache-common                1.3.34-4    support files for all Apache webse
ii  debconf [debconf-2.0]        1.5.3       Debian configuration management sy
ii  libc6                        2.3.6.ds1-4 GNU C Library: Shared libraries
ii  libdb4.4                     4.4.20-3    Berkeley v4.4 Database Libraries [
ii  libexpat1                    1.95.8-3.2  XML parsing C library - runtime li
ii  libmagic1                    4.17-3      File type determination library us
ii  logrotate                    3.7.1-3     Log rotation utility
ii  lsb-base                     3.1-15      Linux Standard Base 3.1 init scrip
ii  mime-support                 3.37-1      MIME files 'mime.types' & 'mailcap
ii  perl                         5.8.8-6.1   Larry Wall's Practical Extraction

Attachment: signature.asc
Description: Digital signature


Reply to: