0021651: Vulnerability for CVE-2016-4975

View Issue Details [ Jump to Notes ]

Project

Category

View Status

Date Submitted

Last Update

0021651

ClearOS

httpd

public

2018-10-01 11:40

2019-02-23 15:11

Reporter

dloper

Assigned To

dloper

Priority

normal

Severity

minor

Reproducibility

always

Status

closed

Resolution

suspended

Platform

OS Version

Product Version

7.4.0

Target Version

7.6.0 Updates

Fixed in Version

Summary

0021651: Vulnerability for CVE-2016-4975

Description

CVE-2016-4975 creates a vulnerability in httpd and webconfig-httpd. This old bug has not been addressed by Redhat or CentOS communities at this time.

https://bugzilla.redhat.com/show_bug.cgi?id=1375968 [^]

https://access.redhat.com/security/cve/cve-2016-4975 [^]

We may need to fork if upstream is not forthcoming with a fix for this issue.

Additional Information

Redhat has backported this fix into https://access.redhat.com/errata/RHSA-2018:2185 [^]

But has not ported this to httpd yet.

Tags

No tags attached.

Relationships

Notes
(0009401) dloper (administrator) 2019-02-23 15:11	Migrated to: https://gitlab.com/clearos/clearfoundation/app-web-server/issues/3 [^]