From 486cdd8e1801a0fba62d9248b6069c26170f7312 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Lubo=C5=A1=20Uhliarik?= Date: Tue, 6 Dec 2022 18:30:22 +0100 Subject: [PATCH] Resolves: #2151313 - reduce AH03408 log level from WARNING to INFO --- httpd-2.4.53-proxy-util-loglevel.patch | 14 ++++++++++++++ httpd.spec | 8 +++++++- 2 files changed, 21 insertions(+), 1 deletion(-) create mode 100644 httpd-2.4.53-proxy-util-loglevel.patch diff --git a/httpd-2.4.53-proxy-util-loglevel.patch b/httpd-2.4.53-proxy-util-loglevel.patch new file mode 100644 index 0000000..34523b8 --- /dev/null +++ b/httpd-2.4.53-proxy-util-loglevel.patch @@ -0,0 +1,14 @@ +diff --git a/modules/proxy/proxy_util.c b/modules/proxy/proxy_util.c +index e488aa6..8267f1b 100644 +--- a/modules/proxy/proxy_util.c ++++ b/modules/proxy/proxy_util.c +@@ -3121,7 +3121,7 @@ PROXY_DECLARE(apr_status_t) ap_proxy_check_connection(const char *scheme, + "%s: backend socket is disconnected.", scheme); + } + else { +- ap_log_error(APLOG_MARK, APLOG_WARNING, 0, server, APLOGNO(03408) ++ ap_log_error(APLOG_MARK, APLOG_INFO, 0, server, APLOGNO(03408) + "%s: reusable backend connection is not empty: " + "forcibly closed", scheme); + } + diff --git a/httpd.spec b/httpd.spec index 1e0e486..ba17b76 100644 --- a/httpd.spec +++ b/httpd.spec @@ -13,7 +13,7 @@ Summary: Apache HTTP Server Name: httpd Version: 2.4.53 -Release: 7%{?dist} +Release: 8%{?dist} URL: https://httpd.apache.org/ Source0: https://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2 Source1: https://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2.asc @@ -114,6 +114,8 @@ Patch66: httpd-2.4.51-r1892413+.patch Patch67: httpd-2.4.51-r1811831.patch # https://bugzilla.redhat.com/show_bug.cgi?id=2098056 Patch68: httpd-2.4.53-r1878890.patch +# https://bugzilla.redhat.com/show_bug.cgi?id=2151313 +Patch69: httpd-2.4.53-proxy-util-loglevel.patch # Security fixes # https://bugzilla.redhat.com/show_bug.cgi?id=2094997 @@ -296,6 +298,7 @@ written in the Lua programming language. %patch66 -p1 -b .r1892413+ %patch67 -p1 -b .r1811831 %patch68 -p1 -b .r1878890 +%patch69 -p1 -b .proxyutil-loglevel %patch200 -p1 -b .CVE-2022-26377 %patch201 -p1 -b .CVE-2022-28615 @@ -863,6 +866,9 @@ exit $rv %{_rpmconfigdir}/macros.d/macros.httpd %changelog +* Tue Dec 06 2022 Luboš Uhliarik - 2.4.53-8 +- Resolves: #2151313 - reduce AH03408 log level from WARNING to INFO + * Wed Jul 20 2022 Luboš Uhliarik - 2.4.53-7 - Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request smuggling