RHEL/CentOS 6.4 and Fabasoft Folio 2013/2014 Update Rollup 3 Update Procedures

Last update: 6 November 2020

Summary

Due to some changes in the mod_status Apache module our Fabasoft Folio Web Service had to be modified, thus creating new dependencies that will be summarized in this article.

Information

On 2014-07-23 Red Hat released the advisory RHSA-2014:0920-1: Important: httpd security update detailing fixes to some httpd-packages. The fixed vulnerabilities could allow an attacker to launch a denial of service attack or execute arbitrary code if certain conditions were met, for details see the CVEs linked in the Red Hat security advisory.

Due to the nature of the updates to some of the Apache modules, which may also be installed on a RHEL/CentOS 6.4 system, our Fabasoft Folio Web Service had to be modified accordingly in order to restore functionality and incorporate the security fixes. These changes to the Apache Modules and the Fabasoft Folio Web Services are dependent on each other. Therefore it is necessary to update both the Fabasoft Folio Web Service and the Apache modules at the same time, otherwise the Fabasoft Folio Web Service will fail to start.

Solution

When updating the Fabasoft Folio Web Service or the Apache libraries on a RHEL/CentOS 6.4 you have to make the following considerations:

When applying a Fabasoft Folio Web Service Hotfix that has a version listed in the "Applies to" section or above, the RHEL/CentOS system has to be updated accordingly.
When applying the latest Apache modules with a version listed in the "Applies to" section or above, you have to apply a Hotfix to your Fabasoft Folio Web Service with a build-number equal or above those mentioned in the "Applies to" section.

Applies to

Fabasoft Folio 2013 Update Rollup 3 - Build 13.0.10.23 and above
Fabasoft Folio 2014 Update Rollup 3 - Build 14.0.10.32 and above
Fabasoft eGov-Suite 2013 Update Rollup 3 - Build 13.0.10.23.11 and above
Fabasoft eGov-Suite 2014 Update Rollup 3 - Build 14.0.10.32.17 and above

in combination with

httpd-2.2.15-31 for i686 and x86_64 and above