FEDORA-2017-9ded7c5670 — security update for httpd

stable

httpd-2.4.27-2.fc25

FEDORA-2017-9ded7c5670 created by luhliarik 7 years ago for Fedora 25

File /etc/sysconfig/httpd is ghosted now

Version update

Security fix for CVE-2017-3167 CVE-2017-3169 CVE-2017-7659 CVE-2017-7668 CVE-2017-7679

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-9ded7c5670

This update has been submitted for testing by luhliarik.

7 years ago

This update has obsoleted httpd-2.4.27-1.fc25, and has inherited its bugs and notes.

7 years ago

This update has been pushed to testing.

7 years ago

yuwata commented & provided feedback 7 years ago

karma

works for me

cserpentis commented & provided feedback 7 years ago

karma

works for me in a VM

filiperosset commented & provided feedback 7 years ago

karma

no regressions noted

This update has been submitted for stable by bodhi.

7 years ago

This update has been pushed to stable.

7 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

httpd-2.4.27-2.fc25

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

BZ#1463194 CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass

BZ#1463197 CVE-2017-3169 httpd: mod_ssl NULL pointer dereference

BZ#1463199 CVE-2017-7659 httpd: mod_http2 NULL pointer dereference

BZ#1463205 CVE-2017-7668 httpd: ap_find_token() buffer overread

BZ#1463207 CVE-2017-7679 httpd: mod_mime buffer overread

BZ#1463208 CVE-2017-3167 CVE-2017-3169 CVE-2017-7659 CVE-2017-7668 CVE-2017-7679 httpd: various flaws [fedora-all]

BZ#1469103 httpd-2.4.27 is available

BZ#1469959 httpd update cleaned out /etc/sysconfig

httpd-2.4.27-2.fc25

Automated Test Results

None

Test Cases


0	0	Test Case HTTPd