We just updated the httpd RPM! Here’s the details:
Package: httpd
Affected OSes: rhel5 and rhel6 and compatible
- Version updated to 2.2.24
- Changed log dir perms from 711 to 700
- Patched to address CVE-2011-3389 (CRIME)
- Patched to address CVE-2012-4929 (OPENSSL_NO_DEFAULT_ZLIB)
We’ll also soon be adding a page to the “Developers” menu showing all current RPMs – stay tuned!