FEDORA-2020-189a1e6c3e — security update for httpd

stable

httpd-2.4.46-1.fc32

FEDORA-2020-189a1e6c3e created by luhliarik 2 years ago for Fedora 32

This release includes the latest stable version of Apache httpd, version 2.4.46. A security issue is addressed in this update:

CVE-2020-11984 mod_proxy_uwsgi: Malicious request may result in information disclosure or RCE of existing file on the server running under a malicious process environment.

For the full list of changes in this release, see https://downloads.apache.org/httpd/CHANGES_2.4.46

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2020-189a1e6c3e

This update has been submitted for testing by luhliarik.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

jorton edited this update.

2 years ago

This update has been pushed to testing.

2 years ago

bojan provided feedback 2 years ago

karma

bojan commented & provided feedback 2 years ago

karma

Works.

imabug provided feedback 2 years ago

karma

This update can be pushed to stable now if the maintainer wishes

2 years ago

pwalter commented & provided feedback 2 years ago

karma

Works

This update has been submitted for stable by bodhi.

2 years ago

pwalter commented & provided feedback 2 years ago

karma

Works

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

httpd-2.4.46-1.fc32

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

modified

2 years ago

BZ#1820775 CVE-2020-1927 httpd: mod_rewrite configurations vulnerable to open redirect [fedora-all]

BZ#1820776 CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value [fedora-all]

BZ#1866581 httpd-2.4.46 is available

BZ#1868147 CVE-2020-11985 httpd: IP address spoofing when proxying using mod_remoteip and mod_rewrite [fedora-all]

BZ#1868148 CVE-2020-11984 httpd: mod_proxy_uswgi buffer overflow [fedora-all]

httpd-2.4.46-1.fc32

Automated Test Results

ignored

Test Cases


0	0	Test Case HTTPd