FEDORA-2025-f94e6fe0b4 — security update for httpd

stable

httpd-2.4.64-1.fc41

FEDORA-2025-f94e6fe0b4 created by luhliarik 8 months ago for Fedora 41

New version 2.4.64 and security fixes

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-f94e6fe0b4

This update has been submitted for testing by luhliarik.

8 months ago

This update's test gating status has been changed to 'waiting'.

8 months ago

This update's test gating status has been changed to 'waiting'.

8 months ago

This update's test gating status has been changed to 'passed'.

8 months ago

This update has been pushed to testing.

7 months ago

This update has been submitted for stable by bodhi.

7 months ago

This update has been pushed to stable.

7 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

8 months ago

in testing

7 months ago

in stable

7 months ago

approved

7 months ago

Builds

httpd-2.4.64-1.fc41

BZ#2379862 CVE-2024-42516 httpd: incomplete fix for CVE-2023-38709 [fedora-41]

BZ#2379864 CVE-2024-43204 httpd: SSRF in Apache HTTP Server with mod_proxy loaded [fedora-41]

BZ#2379866 CVE-2024-47252 httpd: insufficient escaping of user-supplied data in mod_ssl [fedora-41]

BZ#2379868 CVE-2025-23048 httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption [fedora-41]

BZ#2382578 CVE-2025-49812 httpd: HTTP Session Hijack via a TLS upgrade [fedora-41]

httpd-2.4.64-1.fc41

Automated Test Results

passed

Test Cases


0	0	Test Case HTTPd