Security release 2.4.39

[snlnspc]

Hello, version 2.4.39 has come out with some pretty important fixes in it, and we are hoping this version will be out soon.

http://www.apache.org/dist/httpd/CHANGES_2.4.39

We appreciate the effort put into the IUS packages, thank you!

[carlwgeorge]

Thanks for the heads up on this! I've updated the spec file and builds are in progress.

[carlwgeorge]

httpd24u-2.4.39-1 will move to the testing repos during tonight's automation.

[carlwgeorge]

@snlnspc I was planning on promoting this release to the stable repos on Monday, but I've gotten a few other questions about it. Have you had a chance to try out the update from ius-testing? If you (or anyone else) can confirm it works as expected I'll promote it ASAP.

[snlnspc]

@carlwgeorge I ran a few tests just now and all looks fine, so in about an hour from now we're going to flip 600 sites over and I'll report back.

[snlnspc]

@carlwgeorge looks good!

We ran into this immediately after updating https://bugs.centos.org/view.php?id=15680
Our errors were different but the denial was the same, and allowing this access within selinux resolved the issue.

mod_pagespeed 1.13.35.2-0, slightly truncated error messages:

[11:10:43.903008] [pagespeed:error] Unable to create SHM segment [1]globalstatistics, mmap failed with errno=13.
[11:10:43.903080] [pagespeed:warn]  Problem during shared memory setup; statistics functionality unavailable.
[11:10:43.903576] [pagespeed:error] Unable to create SHM segment [1]SharedCircularBuffer.:0, mmap failed with errno=13.
[11:10:43.903800] [pagespeed:error] Unable to create SHM segment [1]pagespeed_default_shm/metadata_cache, mmap failed with errno=13.
[11:10:43.903833] [pagespeed:error] SharedMemCache: can't create segment pagespeed_default_shm/metadata_cache of size 52445184
[11:10:43.903855] [pagespeed:warn]  Unable to initialize shared memory cache: pagespeed_default_shm.
[11:10:43.903978] [pagespeed:error] Unable to create SHM segment [1]/var/cache/mod_pagespeed/ flush /named_locks, mmap failed with errno=13.
[11:10:43.904005] [pagespeed:error] Unable to create memory segment for locks.

Otherwise, zero issues on kernel 3.10.0-957.5.1.el7.x86_64 + php72u running 630~ sites.

[carlwgeorge]

Thanks for testing! Since mod_pagespeed is a third party module I see no reason to delay the httpd24u release, especially since you were able to work around the issue with selinux management. httpd24u-2.4.39-1 will move to the stable repos during tonight's automation.