FEDORA-2020-189a1e6c3e — security update for httpd

stable

httpd-2.4.46-1.fc32

FEDORA-2020-189a1e6c3e created by luhliarik 4 years ago for Fedora 32

This release includes the latest stable version of Apache httpd, version 2.4.46. A security issue is addressed in this update:

CVE-2020-11984 mod_proxy_uwsgi: Malicious request may result in information disclosure or RCE of existing file on the server running under a malicious process environment.

For the full list of changes in this release, see https://downloads.apache.org/httpd/CHANGES_2.4.46

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2020-189a1e6c3e

This update has been submitted for testing by luhliarik.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

jorton edited this update.

4 years ago

This update has been pushed to testing.

4 years ago

bojan provided feedback 4 years ago

karma

bojan commented & provided feedback 4 years ago

karma

Works.

imabug provided feedback 4 years ago

karma

This update can be pushed to stable now if the maintainer wishes

4 years ago

pwalter commented & provided feedback 4 years ago

karma

Works

This update has been submitted for stable by bodhi.

4 years ago

pwalter commented & provided feedback 4 years ago

karma

Works

This update has been pushed to stable.

4 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

modified

4 years ago

Builds

httpd-2.4.46-1.fc32

BZ#1820775 CVE-2020-1927 httpd: mod_rewrite configurations vulnerable to open redirect [fedora-all]

BZ#1820776 CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value [fedora-all]

BZ#1866581 httpd-2.4.46 is available

BZ#1868147 CVE-2020-11985 httpd: IP address spoofing when proxying using mod_remoteip and mod_rewrite [fedora-all]

BZ#1868148 CVE-2020-11984 httpd: mod_proxy_uswgi buffer overflow [fedora-all]

httpd-2.4.46-1.fc32

Automated Test Results

ignored

Test Cases


0	0	Test Case HTTPd