rpms/mod_http2
5
0
Fork 0
Code Issues Pull Requests Releases Activity

Resolves: RHEL-76413 - mod_proxy_http2 failures after CVE-2024-38477 fix

Browse Source
This commit is contained in:
Luboš Uhliarik 2025-01-27 21:09:03 +01:00
parent c11e410c28
commit 779360709a
2 changed files with 28 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
mod_http2-2.0.26-r1918628.patch Normal file
View File

@ -0,0 +1,21 @@
diff --git a/mod_http2/mod_proxy_http2.c b/mod_http2/mod_proxy_http2.c
index ebf8f61..e5cb0ba 100644
--- a/mod_http2/mod_proxy_http2.c
+++ b/mod_http2/mod_proxy_http2.c
@@ -317,7 +317,7 @@ static int proxy_http2_handler(request_rec *r,
apr_port_t proxyport)
{
const char *proxy_func;
- char *locurl = url, *u;
+ char *locurl, *u;
apr_size_t slen;
int is_ssl = 0;
apr_status_t status;
@@ -382,6 +382,7 @@ run_connect:
goto cleanup;
}
+ locurl = url;
ctx->p_conn->is_ssl = ctx->is_ssl;
/* Step One: Determine the URL to connect to (might be a proxy),

9
mod_http2.spec
View File

@ -3,12 +3,14 @@
Name: mod_http2
Version: 2.0.26
Release: 3%{?dist}
Release: 4%{?dist}
Summary: module implementing HTTP/2 for Apache 2
License: ASL 2.0
URL: https://icing.github.io/mod_h2/
Source0: https://github.com/icing/mod_h2/releases/download/v%{version}/mod_http2-%{version}.tar.gz
# Patch1: ...
# https://issues.redhat.com/browse/RHEL-76413
Patch1: mod_http2-2.0.26-r1918628.patch
# Security patches:
#
@ -55,6 +57,9 @@ echo "LoadModule proxy_http2_module modules/mod_proxy_http2.so" > %{buildroot}%{
%{_httpd_moddir}/mod_proxy_http2.so
%changelog
* Mon Jan 27 2025 Luboš Uhliarik <luhliari@redhat.com> - 2.0.26-4
- Resolves: RHEL-76413 - mod_proxy_http2 failures after CVE-2024-38477 fix
* Tue Jul 09 2024 Luboš Uhliarik <luhliari@redhat.com> - 2.0.26-3
- Resolves: RHEL-45806 - mod_http2: DoS by null pointer in websocket
over HTTP/2 (CVE-2024-36387)