FEDORA-2019-099575a123 — security update for httpd and mod_md

httpd-2.4.41-1.fc30 and mod_md-2.0.8-2.fc30

FEDORA-2019-099575a123 created by luhliarik 3 months ago for Fedora 30

stable

This update includes the latest release of the Apache HTTP Server, version 2.4.41, fixing various security issues. Several major enhancements are also included in this update:

mod_md is now packaged from upstream github releases, adding support for ACMEv2.
mod_cgid stderr handling has been improved

See http://www.apache.org/dist/httpd/CHANGES_2.4.41 for a full list of changes since the previous release of httpd.

How to install

sudo dnf upgrade --advisory=FEDORA-2019-099575a123

This update has been submitted for testing by luhliarik. 3 months ago

This update's test gating status has been changed to 'waiting'. 3 months ago

This update's test gating status has been changed to 'ignored'. 3 months ago

This update has been pushed to testing. 3 months ago

bojan provided feedback 3 months ago

karma

imabug provided feedback 3 months ago

karma

This update can be pushed to stable now if the maintainer wishes 3 months ago

jorton edited this update. 3 months ago

pwalter commented & provided feedback 3 months ago

karma

Works

This update has been submitted for stable by bodhi. 3 months ago

This update has been pushed to stable. 3 months ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

Builds

httpd-2.4.41-1.fc30

mod_md-2.0.8-2.fc30

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 months ago

in testing

3 months ago

in stable

3 months ago

modified

3 months ago

BZ#1591157 Unusable entries in error_log when event MPM is activated

BZ#1727434 Fedora apachectl script behaves differently than authors design it

BZ#1743957 CVE-2019-10092 httpd: limited cross-site scripting in mod_proxy error page [fedora-all]

BZ#1743961 CVE-2019-10098 httpd: mod_rewrite potential open redirect [fedora-all]

BZ#1743997 CVE-2019-10097 httpd: null-pointer dereference in mod_remoteip [fedora-all]

httpd-2.4.41-1.fc30
mod_md-2.0.8-2.fc30

Automated Test Results

Test Cases


0	0	Test Case HTTPd