I'm Done with Red Hat (Enterprise Linux)

Re:I'm Done with Red Hat (Enterprise Linux) by vetinari on Tuesday June 27, 2023 @03:48AM (#36490054)

CentOS Stream 8 is on:

* httpd-2.4.37-54.module_el8.8.0+1256+e1598b50 (released 2022-12-08)

* php-7.4.30-1.module_el8.7.0+1190+d11b935a (2022-08-04)

Almalinux 8 is on:

* httpd-2.4.37-56.module_el8.8.0+3560+c8e5e57e.6 (released 2023-04-27)

* php-7.4.33-1.module_el8.8.0+3477+f828cbb0 (2023-01-13)

So meanwhile, for httpd the following was released:

* 2.4.37-56.6 - Resolves: #2190133 - mod_rewrite regression with CVE-2023-25690

* 2.4.37-56.4 - Resolves: #2177748 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting with mod_rewrite and mod_proxy

* 2.4.37-56 - Resolves: #2162499 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write of zero byte; #2162485 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting; #2162509 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request smuggling

* 2.4.37-55 - Resolves: #2155961 - prevent sscg creating /dhparams.pem

For php:

* 7.4.33-1 - rebase to 7.4.33, fix: due to an integer overflow PDO::quote() may return unquoted string

There are already issues filled in bugzilla:

* https://bugzilla.redhat.com/show_bug.cgi?id=2217408

* https://bugzilla.redhat.com/show_bug.cgi?id=2217409

[ Parent | on HN ]

Re:I'm Done with Red Hat (Enterprise Linux) by bonzini on Tuesday June 27, 2023 @04:14AM (#36490240)

Thanks, I'll forward this.

[ Parent | on HN ]