Up to 2.4.20; fixes CVE-2021-41773, CVE-2021-41524 (both introduced in 2.4.49)

[packages/apache.git] / apache-manual.conf

diff --git a/apache-manual.conf b/apache-manual.conf
index 709d97f229366b73af61399d5b8037614647ffb2..a42794125216363db67eceb7f48f9ca33847cf4a 100644 (file)
--- a/apache-manual.conf
+++ b/apache-manual.conf
@@ -1,8 +1,7 @@
-#
 # Provide access to the documentation on your server as
 #  http://yourserver.example.com/manual/
 # The documentation is always available at
-#  http://httpd.apache.org/docs/2.2/
+#  https://httpd.apache.org/docs/2.4/
 #
 # Required modules: mod_alias, mod_setenvif, mod_negotiation
 #                   mod_setenvif, mod_negotiation
@@ -14,6 +13,10 @@ AliasMatch ^/manual(?:/(?:da|de|en|es|fr|ja|ko|pt-br|ru|tr|zh-cn))?(/.*)?$ "/hom
        Options Indexes
        AllowOverride None
        Require all granted
+       <IfModule mod_access_compat.c>
+               Order allow,deny
+               Allow from all
+       </IfModule>
 
        <Files *.html>
                SetHandler type-map