FEDORA-2015-11792 — security update for httpd

stable

httpd-2.4.16-1.fc21

FEDORA-2015-11792 created by jkaluza 9 years ago for Fedora 21

Update to new version 2.4.16. This update fixed various bugs as well as few security issues.

For full changelog, see http://www.apache.org/dist/httpd/CHANGES_2.4.16

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2015-11792

This update has been submitted for testing by jkaluza.

9 years ago

taskotron commented 9 years ago

Taskotron: depcheck test PASSED on i386. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/106821/steps/runtask/logs/stdio (results are informative only)

taskotron commented 9 years ago

Taskotron: depcheck test PASSED on x86_64. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/106821/steps/runtask/logs/stdio (results are informative only)

This update is currently being pushed to the Fedora 21 testing updates repository.

9 years ago

This update has been pushed to testing

9 years ago

mstevens commented & provided feedback 9 years ago

karma

works fine

remi provided feedback 9 years ago

karma

hguemar commented & provided feedback 9 years ago

karma

no regressions

This update has reached the stable karma threshold and will be pushed to the stable updates repository

9 years ago

taskotron commented 9 years ago

Taskotron: upgradepath test PASSED on noarch. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/109643/steps/runtask/logs/stdio (results are informative only)

This update is currently being pushed to the Fedora 21 stable updates repository.

9 years ago

This update has been pushed to stable

9 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

httpd-2.4.16-1.fc21

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

9 years ago

in testing

9 years ago

in stable

9 years ago

BZ#1187888 httpd-2.4.16 is available

BZ#1202988 CVE-2015-0228 httpd: Possible mod_lua crash due to websocket bug

BZ#1232127 CVE-2015-0228 httpd: Possible mod_lua crash due to websocket bug [fedora-all]

BZ#1243887 CVE-2015-3183 httpd: chunk header parsing defect

BZ#1243888 CVE-2015-3185 httpd: replacement of ap_some_auth_required with new ap_some_authn_required and ap_force_authn

BZ#1243891 CVE-2015-0253 httpd: NULL pointer dereference crash with ErrorDocument 400 pointing to a local URL-path

BZ#1243894 CVE-2015-3185 CVE-2015-3183 CVE-2015-0253 httpd: various flaws [fedora-all]

httpd-2.4.16-1.fc21

Automated Test Results

None

Test Cases


0	0	Test Case HTTPd