FEDORA-2017-620085cede — security update for httpd

obsolete

httpd-2.4.26-1.fc25

FEDORA-2017-620085cede created by luhliarik 7 years ago for Fedora 25

Security fix for CVE-2017-3167 CVE-2017-3169 CVE-2017-7659 CVE-2017-7668 CVE-2017-7679

This update has been submitted for testing by luhliarik.

7 years ago

This update has been pushed to testing.

7 years ago

yuwata commented & provided feedback 7 years ago

karma

works for me

cserpentis commented & provided feedback 7 years ago

karma

works for me in a VM

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

7 years ago

This update has been obsoleted by httpd-2.4.27-1.fc25.

7 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Thresholds

Minimum Karma

Minimum Testing

7 days

Dates

submitted

7 years ago

in testing

7 years ago

Builds

httpd-2.4.26-1.fc25

BZ#1463194 CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass

BZ#1463197 CVE-2017-3169 httpd: mod_ssl NULL pointer dereference

BZ#1463199 CVE-2017-7659 httpd: mod_http2 NULL pointer dereference

BZ#1463205 CVE-2017-7668 httpd: ap_find_token() buffer overread

BZ#1463207 CVE-2017-7679 httpd: mod_mime buffer overread

BZ#1463208 CVE-2017-3167 CVE-2017-3169 CVE-2017-7659 CVE-2017-7668 CVE-2017-7679 httpd: various flaws [fedora-all]

httpd-2.4.26-1.fc25

Automated Test Results

None

Test Cases


0	0	Test Case HTTPd