summaryrefslogtreecommitdiffstats
path: root/httpd.spec
diff options
context:
space:
mode:
authorJoe Orton <jorton@redhat.com>2016-07-18 16:31:52 +0100
committerJoe Orton <jorton@redhat.com>2016-07-18 16:31:52 +0100
commit4a0435cd7b98675e67c387eb9cd5170112c6b494 (patch)
treedbd2eb6e413255f0bb4323f49d05a9f5fe0d275c /httpd.spec
parent17ef1b1f5e024cc8f40f23345fd0ce589e78d8f6 (diff)
downloadhttpd-4a0435cd7b98675e67c387eb9cd5170112c6b494.tar.gz
httpd-4a0435cd7b98675e67c387eb9cd5170112c6b494.tar.xz
httpd-4a0435cd7b98675e67c387eb9cd5170112c6b494.zip
add security fix for CVE-2016-5387
Diffstat (limited to 'httpd.spec')
-rw-r--r--httpd.spec8
1 files changed, 7 insertions, 1 deletions
diff --git a/httpd.spec b/httpd.spec
index 3b9533b..9566281 100644
--- a/httpd.spec
+++ b/httpd.spec
@@ -8,7 +8,7 @@
Summary: Apache HTTP Server
Name: httpd
Version: 2.4.23
-Release: 3%{?dist}
+Release: 4%{?dist}
URL: http://httpd.apache.org/
Source0: http://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2
Source1: index.html
@@ -67,6 +67,7 @@ Patch55: httpd-2.4.4-malformed-host.patch
Patch56: httpd-2.4.4-mod_unique_id.patch
Patch57: httpd-2.4.10-sigint.patch
# Security fixes
+Patch100: httpd-2.4.18-CVE-2016-5387.patch
License: ASL 2.0
Group: System Environment/Daemons
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
@@ -211,6 +212,8 @@ interface for storing and accessing per-user session data.
%patch56 -p1 -b .uniqueid
%patch57 -p1 -b .sigint
+%patch100 -p1 -b .cve5387
+
# Patch in the vendor string
sed -i '/^#define PLATFORM/s/Unix/%{vstring}/' os/unix/os.h
@@ -682,6 +685,9 @@ rm -rf $RPM_BUILD_ROOT
%{_rpmconfigdir}/macros.d/macros.httpd
%changelog
+* Mon Jul 18 2016 Joe Orton <jorton@redhat.com> - 2.4.23-4
+- add security fix for CVE-2016-5387
+
* Thu Jul 7 2016 Joe Orton <jorton@redhat.com> - 2.4.23-3
- load mod_watchdog by default (#1353582)