RHBA-2015:1056 - Bug Fix Advisory

Topic

Updated httpd24 packages that fix several bugs and add various enhancements are
now available as part of Red Hat Software Collections 2.0 for Red Hat Enterprise
Linux.

Description

The Apache HTTP Server is a powerful, efficient, and extensible web server. The httpd24 packages provide a recent stable release of version 2.4 of the Apache HTTP Server, along with the mod_auth_kerb module.

The httpd24 packages have been upgraded to upstream version 2.4.12, which provides a number of bug fixes and enhancements over the previous version. Among others:

• Support for Passenger has been added
• Support for Elliptic curve Diffie–Hellman (ECDH) has been added
• Support for Unix Domain Socket (UDS) in the mod_proxy_fcgi module has been improved
• Installation of the mod_ssl module in FIPS mode has been fixed.

(BZ#1166208)

Users of httpd24 are advised to upgrade to these updated packages, which fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 6.6 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 6.5 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 6 x86_64
• Red Hat Software Collections (for RHEL Workstation) 1 for RHEL 7 x86_64
• Red Hat Software Collections (for RHEL Workstation) 1 for RHEL 6 x86_64
• Red Hat Software Collections (for RHEL Server) from RHUI 1 for RHEL 7 x86_64
• Red Hat Software Collections (for RHEL Server) from RHUI 1 for RHEL 6 x86_64

Fixes

• BZ - 1088194 - httpd24 in RHEL7 should obsolete httpd24-apr and httpd24-apr-util
• BZ - 1108379 - FTBFS: incorrect BuildRequires: openssl on httpd24
• BZ - 1136906 - SetHandler to proxy support
• BZ - 1138159 - Backport ECDH support to httpd
• BZ - 1150231 - Missing Reason-Phrase in HTTP response header for *standard* 3-digit status codes
• BZ - 1174790 - Bad obsoletes for mod_proxy_html
• BZ - 1180223 - mod_ssl uses small DHE parameters for non standard RSA keys
• BZ - 1184034 - Error in `/usr/sbin/httpd': free(): invalid pointer
• BZ - 1184441 - return value of service httpd24-httpd is 3 instead of 2 when LOCKFILE exists and service is not running
• BZ - 1193456 - httpd24-httpd runs as unconfined_t
• BZ - 1196559 - wrong path to document root in httpd.conf

CVEs

(none)

References

(none)