RHBA-2016:1154 - Bug Fix Advisory

Topic

Updated httpd24 packages that fix several bugs and add various enhancements are now available as a part of Red Hat Software Collections 2.2 for Red Hat Enterprise Linux.

Description

The Apache HTTP Server is a powerful, efficient, and extensible web server. The httpd24 packages provide a recent stable release of version 2.4 of the Apache HTTP Server, along with the mod_auth_kerb module.

The httpd24 packages have been upgraded to upstream version 2.4.18, which provides numerous bug fixes and enhancements. Notable changes are as follows:

• Experimental support for the HTTP/2.0 protocol has been added, provided by the new mod_http2 module. HTTP/2 support can be enabled using the new Protocols directive. Upgrading to HTTP/2.0 over TLS is supported using the next protocol negotiation (NPN) TLS extension.
• Version 7.47.1 of the curl command-line tool, with HTTP/2.0 support enabled, has been added to the Software Collection to facilitate testing.

(BZ#1301159)

Users of httpd24 are advised to upgrade to these updated packages, which fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.7 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.6 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.5 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.4 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.3 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.2 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.1 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 6.7 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 6.6 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 6 x86_64
• Red Hat Software Collections (for RHEL Workstation) 1 for RHEL 7 x86_64
• Red Hat Software Collections (for RHEL Workstation) 1 for RHEL 6 x86_64

Fixes

• BZ - 1153579 - httpd uses hardcoded curve for ECDHE suites
• BZ - 1193860 - mod_proxy: empty reply from server
• BZ - 1196553 - bomb.gif icon displayed with other files than intended
• BZ - 1204075 - HTTPD variable in .../etc/sysconfig/httpd should be ignored
• BZ - 1207093 - Apache startup fails with misleading error if DocumentRoot has context type user_home_t
• BZ - 1218271 - httpd24 in RHEL7 should obsolete httpd24-apr and httpd24-apr-util in all versions
• BZ - 1219112 - update or remove version of RHSCL in man page
• BZ - 1221650 - 'service httpd24-httpd graceful' starts server without daemon
• BZ - 1222055 - httpd24 sysconfig should contain HTTPD_LANG=C on RHEL 6
• BZ - 1222494 - call restorecon on /etc/rc.d/init.d/htcacheclean after install
• BZ - 1225116 - If httpd dies for some reason it leaves shared memory segments behind, and won't start until shm is cleaned up manually.
• BZ - 1253396 - mod_proxy_wstunnel not included in default apache config, does not work in conjunction with mod_rewrite, does not support ssl
• BZ - 1282481 - AliasMatch in manual.conf yields 403 Forbidden for httpd24-httpd-manual.noarch
• BZ - 1302653 - [RFE]Request for http2 protocol support (httpd-2.4.17)
• BZ - 1319780 - apachectl use httpd from system instead of collection one
• BZ - 1319837 - apxs generates Makefile with wrong path
• BZ - 1319968 - no rpm owns some files/dirs + leftovers after uninstall
• BZ - 1324406 - Error 404 when switching language in HTML manual more than once

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal