FEDORA-2022-b54a8dee29 — security update for httpd

stable

httpd-2.4.54-1.fc35

FEDORA-2022-b54a8dee29 created by luhliarik 2 years ago for Fedora 35

new version 2.4.54

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-b54a8dee29

This update has been submitted for testing by luhliarik.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'failed'.

2 years ago

luhliarik edited this update.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update has been submitted for testing by luhliarik.

2 years ago

This update's test gating status has been changed to 'failed'.

2 years ago

This update has been pushed to testing.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

httpd-2.4.54-1.fc35

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

modified

2 years ago

BZ#2094998 CVE-2022-26377 httpd: mod_proxy_ajp: Possible request smuggling [fedora-all]

BZ#2095003 CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite() [fedora-all]

BZ#2095007 CVE-2022-28615 httpd: out-of-bounds read in ap_strcmp_match() [fedora-all]

BZ#2095013 CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody [fedora-all]

BZ#2095016 CVE-2022-30522 httpd: mod_sed: DoS vulnerability [fedora-all]

BZ#2095019 CVE-2022-30556 httpd: mod_lua: Information disclosure with websockets [fedora-all]

BZ#2095021 CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism [fedora-all]

BZ#2099897 Can it be updated 2.4.54 to fix CISE HIGH vulnerability reports?

httpd-2.4.54-1.fc35

Automated Test Results

passed

Test Cases


0	0	Test Case HTTPd