RHEL/CentOS 6.4 and Fabasoft Folio 2013/2014 Update Rollup 3 Update Procedures
Due to some changes in the mod_status Apache module our Fabasoft Folio Web Service had to be modified, thus creating new dependencies that will be summarized in this article.
On 2014-07-23 Red Hat released the advisory RHSA-2014:0920-1: Important: httpd security update detailing fixes to some httpd-packages. The fixed vulnerabilities could allow an attacker to launch a denial of service attack or execute arbitrary code if certain conditions were met, for details see the CVEs linked in the Red Hat security advisory.
Due to the nature of the updates to some of the Apache modules, which may also be installed on a RHEL/CentOS 6.4 system, our Fabasoft Folio Web Service had to be modified accordingly in order to restore functionality and incorporate the security fixes. These changes to the Apache Modules and the Fabasoft Folio Web Services are dependent on each other. Therefore it is necessary to update both the Fabasoft Folio Web Service and the Apache modules at the same time, otherwise the Fabasoft Folio Web Service will fail to start.
When updating the Fabasoft Folio Web Service or the Apache libraries on a RHEL/CentOS 6.4 you have to make the following considerations:
- When applying a Fabasoft Folio Web Service Hotfix that has a version listed in the "Applies to" section or above, the RHEL/CentOS system has to be updated accordingly.
- When applying the latest Apache modules with a version listed in the "Applies to" section or above, you have to apply a Hotfix to your Fabasoft Folio Web Service with a build-number equal or above those mentioned in the "Applies to" section.
- Fabasoft Folio 2013 Update Rollup 3 - Build 184.108.40.206 and above
- Fabasoft Folio 2014 Update Rollup 3 - Build 220.127.116.11 and above
- Fabasoft eGov-Suite 2013 Update Rollup 3 - Build 18.104.22.168.11 and above
- Fabasoft eGov-Suite 2014 Update Rollup 3 - Build 22.214.171.124.17 and above
in combination with
- httpd-2.2.15-31 for i686 and x86_64 and above