FEDORA-2021-dce7e7738e — security update for httpd

stable

httpd-2.4.49-1.fc34

FEDORA-2021-dce7e7738e created by luhliarik 3 years ago for Fedora 34

New httpd release 2.4.49

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-dce7e7738e

This update has been submitted for testing by luhliarik.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

imabug provided feedback 3 years ago

karma

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago

bojan provided feedback 3 years ago

karma

This update can be pushed to stable now if the maintainer wishes

3 years ago

ibims provided feedback 3 years ago

karma

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

httpd-2.4.49-1.fc34

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

BZ#1968280 CVE-2020-35452 httpd: Single zero byte stack overflow in mod_auth_digest [fedora-all]

BZ#1968308 CVE-2021-26690 httpd: mod_session NULL pointer dereference in parser [fedora-all]

BZ#1969233 CVE-2021-26691 httpd: Heap overflow in mod_session [fedora-all]

BZ#1969234 CVE-2020-13950 httpd: mod_proxy NULL pointer dereference [fedora-all]

BZ#1969236 CVE-2019-17567 httpd: mod_proxy_wstunnel tunneling of non Upgraded connection [fedora-all]

BZ#1969241 CVE-2021-30641 httpd: MergeSlashes regression [fedora-all]

BZ#2005118 CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path [fedora-all]

BZ#2005120 CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input [fedora-all]

BZ#2005125 CVE-2021-36160 httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path [fedora-all]

BZ#2005129 CVE-2021-34798 httpd: NULL pointer dereference via malformed requests [fedora-all]

httpd-2.4.49-1.fc34

Automated Test Results

ignored

Test Cases


0	0	Test Case HTTPd