{"update": {"autokarma": true, "autotime": true, "stable_karma": 3, "stable_days": 7, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "New httpd release 2.4.49", "type": "security", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2021-09-17 14:17:50", "date_modified": null, "date_approved": null, "date_testing": "2021-09-19 05:41:20", "date_stable": "2021-09-20 13:55:08", "alias": "FEDORA-2021-dce7e7738e", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2021-09-20 13:55:08", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2021-dce7e7738e", "title": "httpd-2.4.49-1.fc34", "version_hash": "3fe80622b8e96105bd7cb888e5ed4aef1c745734", "release": {"name": "F34", "long_name": "Fedora 34", "version": "34", "id_prefix": "FEDORA", "branch": "f34", "dist_tag": "f34", "stable_tag": "f34-updates", "testing_tag": "f34-updates-testing", "candidate_tag": "f34-updates-candidate", "pending_signing_tag": "f34-signing-pending", "pending_testing_tag": "f34-updates-testing-pending", "pending_stable_tag": "f34-updates-pending", "override_tag": "f34-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "luhliarik", "email": "luhliari@redhat.com", "id": 959, "avatar": "https://seccdn.libravatar.org/avatar/8e63b107c1a61890dc2700ceb13a4fe83ebea194ae95cb89e656c660349e961d?s=24&d=retro", "openid": "luhliarik.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "modularity-wg"}, {"name": "trust admins"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by luhliarik. ", "timestamp": "2021-09-17 14:17:51", "update_id": 341879, "user_id": 91, "id": 2211813, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2021-09-17 14:17:51", "update_id": 341879, "user_id": 91, "id": 2211814, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2021-09-17 14:17:51", "update_id": 341879, "user_id": 91, "id": 2211815, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-17 14:47:24", "update_id": 341879, "user_id": 2935, "id": 2211876, "bug_feedback": [{"karma": 0, "comment_id": 2211876, "bug_id": 1968280, "bug": {"bug_id": 1968280, "title": "CVE-2020-35452 httpd: Single zero byte stack overflow in mod_auth_digest [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2211876, "bug_id": 1968308, "bug": {"bug_id": 1968308, "title": "CVE-2021-26690 httpd: mod_session NULL pointer dereference in parser [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2211876, "bug_id": 1969233, "bug": {"bug_id": 1969233, "title": "CVE-2021-26691 httpd: Heap overflow in mod_session [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2211876, "bug_id": 1969234, "bug": {"bug_id": 1969234, "title": "CVE-2020-13950 httpd: mod_proxy NULL pointer dereference [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2211876, "bug_id": 1969236, "bug": {"bug_id": 1969236, "title": "CVE-2019-17567 httpd:  mod_proxy_wstunnel tunneling of non Upgraded connection [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2211876, "bug_id": 1969241, "bug": {"bug_id": 1969241, "title": "CVE-2021-30641 httpd: MergeSlashes regression [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2211876, "bug_id": 2005118, "bug": {"bug_id": 2005118, "title": "CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2211876, "bug_id": 2005120, "bug": {"bug_id": 2005120, "title": "CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2211876, "bug_id": 2005125, "bug": {"bug_id": 2005125, "title": "CVE-2021-36160 httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2211876, "bug_id": 2005129, "bug": {"bug_id": 2005129, "title": "CVE-2021-34798 httpd: NULL pointer dereference via malformed requests [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [{"karma": 0, "comment_id": 2211876, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2021-09-17 15:14:38", "update_id": 341879, "user_id": 91, "id": 2211931, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2021-09-19 05:42:44", "update_id": 341879, "user_id": 91, "id": 2213661, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 06:43:02", "update_id": 341879, "user_id": 198, "id": 2213745, "bug_feedback": [{"karma": 0, "comment_id": 2213745, "bug_id": 1968280, "bug": {"bug_id": 1968280, "title": "CVE-2020-35452 httpd: Single zero byte stack overflow in mod_auth_digest [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213745, "bug_id": 1968308, "bug": {"bug_id": 1968308, "title": "CVE-2021-26690 httpd: mod_session NULL pointer dereference in parser [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213745, "bug_id": 1969233, "bug": {"bug_id": 1969233, "title": "CVE-2021-26691 httpd: Heap overflow in mod_session [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213745, "bug_id": 1969234, "bug": {"bug_id": 1969234, "title": "CVE-2020-13950 httpd: mod_proxy NULL pointer dereference [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213745, "bug_id": 1969236, "bug": {"bug_id": 1969236, "title": "CVE-2019-17567 httpd:  mod_proxy_wstunnel tunneling of non Upgraded connection [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213745, "bug_id": 1969241, "bug": {"bug_id": 1969241, "title": "CVE-2021-30641 httpd: MergeSlashes regression [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213745, "bug_id": 2005118, "bug": {"bug_id": 2005118, "title": "CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213745, "bug_id": 2005120, "bug": {"bug_id": 2005120, "title": "CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213745, "bug_id": 2005125, "bug": {"bug_id": 2005125, "title": "CVE-2021-36160 httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213745, "bug_id": 2005129, "bug": {"bug_id": 2005129, "title": "CVE-2021-34798 httpd: NULL pointer dereference via malformed requests [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [{"karma": 0, "comment_id": 2213745, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update can be pushed to stable now if the maintainer wishes", "timestamp": "2021-09-19 06:44:01", "update_id": 341879, "user_id": 91, "id": 2213746, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 09:13:57", "update_id": 341879, "user_id": 3953, "id": 2213780, "bug_feedback": [{"karma": 0, "comment_id": 2213780, "bug_id": 1968280, "bug": {"bug_id": 1968280, "title": "CVE-2020-35452 httpd: Single zero byte stack overflow in mod_auth_digest [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213780, "bug_id": 1968308, "bug": {"bug_id": 1968308, "title": "CVE-2021-26690 httpd: mod_session NULL pointer dereference in parser [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213780, "bug_id": 1969233, "bug": {"bug_id": 1969233, "title": "CVE-2021-26691 httpd: Heap overflow in mod_session [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213780, "bug_id": 1969234, "bug": {"bug_id": 1969234, "title": "CVE-2020-13950 httpd: mod_proxy NULL pointer dereference [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213780, "bug_id": 1969236, "bug": {"bug_id": 1969236, "title": "CVE-2019-17567 httpd:  mod_proxy_wstunnel tunneling of non Upgraded connection [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213780, "bug_id": 1969241, "bug": {"bug_id": 1969241, "title": "CVE-2021-30641 httpd: MergeSlashes regression [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213780, "bug_id": 2005118, "bug": {"bug_id": 2005118, "title": "CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213780, "bug_id": 2005120, "bug": {"bug_id": 2005120, "title": "CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213780, "bug_id": 2005125, "bug": {"bug_id": 2005125, "title": "CVE-2021-36160 httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2213780, "bug_id": 2005129, "bug": {"bug_id": 2005129, "title": "CVE-2021-34798 httpd: NULL pointer dereference via malformed requests [fedora-all]", "security": true, "parent": false}}], "testcase_feedback": [{"karma": 0, "comment_id": 2213780, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "ibims", "email": "m-teuber@gmx.de", "id": 3953, "avatar": "https://seccdn.libravatar.org/avatar/2db5e031827484f8d98c8db3ffcd574f223ccacd5cfbe5e5a50aba30a469feb1?s=24&d=retro", "openid": "ibims.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2021-09-19 09:13:57", "update_id": 341879, "user_id": 91, "id": 2213781, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2021-09-20 13:57:29", "update_id": 341879, "user_id": 91, "id": 2215381, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "httpd-2.4.49-1.fc34", "signed": true, "release_id": 47, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1968280, "title": "CVE-2020-35452 httpd: Single zero byte stack overflow in mod_auth_digest [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2211876, "bug_id": 1968280, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-17 14:47:24", "update_id": 341879, "user_id": 2935, "id": 2211876, "testcase_feedback": [{"karma": 0, "comment_id": 2211876, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 2213745, "bug_id": 1968280, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 06:43:02", "update_id": 341879, "user_id": 198, "id": 2213745, "testcase_feedback": [{"karma": 0, "comment_id": 2213745, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 2213780, "bug_id": 1968280, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 09:13:57", "update_id": 341879, "user_id": 3953, "id": 2213780, "testcase_feedback": [{"karma": 0, "comment_id": 2213780, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "ibims", "email": "m-teuber@gmx.de", "id": 3953, "avatar": "https://seccdn.libravatar.org/avatar/2db5e031827484f8d98c8db3ffcd574f223ccacd5cfbe5e5a50aba30a469feb1?s=24&d=retro", "openid": "ibims.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}, {"bug_id": 1968308, "title": "CVE-2021-26690 httpd: mod_session NULL pointer dereference in parser [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2211876, "bug_id": 1968308, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-17 14:47:24", "update_id": 341879, "user_id": 2935, "id": 2211876, "testcase_feedback": [{"karma": 0, "comment_id": 2211876, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 2213745, "bug_id": 1968308, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 06:43:02", "update_id": 341879, "user_id": 198, "id": 2213745, "testcase_feedback": [{"karma": 0, "comment_id": 2213745, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 2213780, "bug_id": 1968308, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 09:13:57", "update_id": 341879, "user_id": 3953, "id": 2213780, "testcase_feedback": [{"karma": 0, "comment_id": 2213780, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "ibims", "email": "m-teuber@gmx.de", "id": 3953, "avatar": "https://seccdn.libravatar.org/avatar/2db5e031827484f8d98c8db3ffcd574f223ccacd5cfbe5e5a50aba30a469feb1?s=24&d=retro", "openid": "ibims.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}, {"bug_id": 1969233, "title": "CVE-2021-26691 httpd: Heap overflow in mod_session [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2211876, "bug_id": 1969233, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-17 14:47:24", "update_id": 341879, "user_id": 2935, "id": 2211876, "testcase_feedback": [{"karma": 0, "comment_id": 2211876, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 2213745, "bug_id": 1969233, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 06:43:02", "update_id": 341879, "user_id": 198, "id": 2213745, "testcase_feedback": [{"karma": 0, "comment_id": 2213745, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 2213780, "bug_id": 1969233, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 09:13:57", "update_id": 341879, "user_id": 3953, "id": 2213780, "testcase_feedback": [{"karma": 0, "comment_id": 2213780, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "ibims", "email": "m-teuber@gmx.de", "id": 3953, "avatar": "https://seccdn.libravatar.org/avatar/2db5e031827484f8d98c8db3ffcd574f223ccacd5cfbe5e5a50aba30a469feb1?s=24&d=retro", "openid": "ibims.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}, {"bug_id": 1969234, "title": "CVE-2020-13950 httpd: mod_proxy NULL pointer dereference [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2211876, "bug_id": 1969234, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-17 14:47:24", "update_id": 341879, "user_id": 2935, "id": 2211876, "testcase_feedback": [{"karma": 0, "comment_id": 2211876, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 2213745, "bug_id": 1969234, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 06:43:02", "update_id": 341879, "user_id": 198, "id": 2213745, "testcase_feedback": [{"karma": 0, "comment_id": 2213745, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 2213780, "bug_id": 1969234, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 09:13:57", "update_id": 341879, "user_id": 3953, "id": 2213780, "testcase_feedback": [{"karma": 0, "comment_id": 2213780, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "ibims", "email": "m-teuber@gmx.de", "id": 3953, "avatar": "https://seccdn.libravatar.org/avatar/2db5e031827484f8d98c8db3ffcd574f223ccacd5cfbe5e5a50aba30a469feb1?s=24&d=retro", "openid": "ibims.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}, {"bug_id": 1969236, "title": "CVE-2019-17567 httpd:  mod_proxy_wstunnel tunneling of non Upgraded connection [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2211876, "bug_id": 1969236, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-17 14:47:24", "update_id": 341879, "user_id": 2935, "id": 2211876, "testcase_feedback": [{"karma": 0, "comment_id": 2211876, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 2213745, "bug_id": 1969236, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 06:43:02", "update_id": 341879, "user_id": 198, "id": 2213745, "testcase_feedback": [{"karma": 0, "comment_id": 2213745, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 2213780, "bug_id": 1969236, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 09:13:57", "update_id": 341879, "user_id": 3953, "id": 2213780, "testcase_feedback": [{"karma": 0, "comment_id": 2213780, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "ibims", "email": "m-teuber@gmx.de", "id": 3953, "avatar": "https://seccdn.libravatar.org/avatar/2db5e031827484f8d98c8db3ffcd574f223ccacd5cfbe5e5a50aba30a469feb1?s=24&d=retro", "openid": "ibims.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}, {"bug_id": 1969241, "title": "CVE-2021-30641 httpd: MergeSlashes regression [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2211876, "bug_id": 1969241, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-17 14:47:24", "update_id": 341879, "user_id": 2935, "id": 2211876, "testcase_feedback": [{"karma": 0, "comment_id": 2211876, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 2213745, "bug_id": 1969241, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 06:43:02", "update_id": 341879, "user_id": 198, "id": 2213745, "testcase_feedback": [{"karma": 0, "comment_id": 2213745, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 2213780, "bug_id": 1969241, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 09:13:57", "update_id": 341879, "user_id": 3953, "id": 2213780, "testcase_feedback": [{"karma": 0, "comment_id": 2213780, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "ibims", "email": "m-teuber@gmx.de", "id": 3953, "avatar": "https://seccdn.libravatar.org/avatar/2db5e031827484f8d98c8db3ffcd574f223ccacd5cfbe5e5a50aba30a469feb1?s=24&d=retro", "openid": "ibims.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}, {"bug_id": 2005118, "title": "CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2211876, "bug_id": 2005118, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-17 14:47:24", "update_id": 341879, "user_id": 2935, "id": 2211876, "testcase_feedback": [{"karma": 0, "comment_id": 2211876, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 2213745, "bug_id": 2005118, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 06:43:02", "update_id": 341879, "user_id": 198, "id": 2213745, "testcase_feedback": [{"karma": 0, "comment_id": 2213745, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 2213780, "bug_id": 2005118, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 09:13:57", "update_id": 341879, "user_id": 3953, "id": 2213780, "testcase_feedback": [{"karma": 0, "comment_id": 2213780, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "ibims", "email": "m-teuber@gmx.de", "id": 3953, "avatar": "https://seccdn.libravatar.org/avatar/2db5e031827484f8d98c8db3ffcd574f223ccacd5cfbe5e5a50aba30a469feb1?s=24&d=retro", "openid": "ibims.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}, {"bug_id": 2005120, "title": "CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2211876, "bug_id": 2005120, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-17 14:47:24", "update_id": 341879, "user_id": 2935, "id": 2211876, "testcase_feedback": [{"karma": 0, "comment_id": 2211876, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 2213745, "bug_id": 2005120, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 06:43:02", "update_id": 341879, "user_id": 198, "id": 2213745, "testcase_feedback": [{"karma": 0, "comment_id": 2213745, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 2213780, "bug_id": 2005120, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 09:13:57", "update_id": 341879, "user_id": 3953, "id": 2213780, "testcase_feedback": [{"karma": 0, "comment_id": 2213780, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "ibims", "email": "m-teuber@gmx.de", "id": 3953, "avatar": "https://seccdn.libravatar.org/avatar/2db5e031827484f8d98c8db3ffcd574f223ccacd5cfbe5e5a50aba30a469feb1?s=24&d=retro", "openid": "ibims.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}, {"bug_id": 2005125, "title": "CVE-2021-36160 httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2211876, "bug_id": 2005125, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-17 14:47:24", "update_id": 341879, "user_id": 2935, "id": 2211876, "testcase_feedback": [{"karma": 0, "comment_id": 2211876, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 2213745, "bug_id": 2005125, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 06:43:02", "update_id": 341879, "user_id": 198, "id": 2213745, "testcase_feedback": [{"karma": 0, "comment_id": 2213745, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 2213780, "bug_id": 2005125, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 09:13:57", "update_id": 341879, "user_id": 3953, "id": 2213780, "testcase_feedback": [{"karma": 0, "comment_id": 2213780, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "ibims", "email": "m-teuber@gmx.de", "id": 3953, "avatar": "https://seccdn.libravatar.org/avatar/2db5e031827484f8d98c8db3ffcd574f223ccacd5cfbe5e5a50aba30a469feb1?s=24&d=retro", "openid": "ibims.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}, {"bug_id": 2005129, "title": "CVE-2021-34798 httpd: NULL pointer dereference via malformed requests [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2211876, "bug_id": 2005129, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-17 14:47:24", "update_id": 341879, "user_id": 2935, "id": 2211876, "testcase_feedback": [{"karma": 0, "comment_id": 2211876, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 2213745, "bug_id": 2005129, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 06:43:02", "update_id": 341879, "user_id": 198, "id": 2213745, "testcase_feedback": [{"karma": 0, "comment_id": 2213745, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 2213780, "bug_id": 2005129, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2021-09-19 09:13:57", "update_id": 341879, "user_id": 3953, "id": 2213780, "testcase_feedback": [{"karma": 0, "comment_id": 2213780, "testcase_id": 233, "testcase": {"name": "QA:Testcase HTTPd", "id": 233}}], "user": {"name": "ibims", "email": "m-teuber@gmx.de", "id": 3953, "avatar": "https://seccdn.libravatar.org/avatar/2db5e031827484f8d98c8db3ffcd574f223ccacd5cfbe5e5a50aba30a469feb1?s=24&d=retro", "openid": "ibims.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}], "updateid": "FEDORA-2021-dce7e7738e", "karma": 3, "content_type": "rpm", "test_cases": [{"name": "QA:Testcase HTTPd", "id": 233}]}, "can_edit": false, "ci_allowed": false}