Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-131827

Backport patch from https://github.com/apache/httpd/pull/419 to RHEL httpd

Linking RHIVOS CVEs to...Migration: Automation ...RHELPRIO AssignedTeam ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • rhel-9.8
    • rhel-9.7
    • httpd
    • None
    • None
    • None
    • rhel-stacks-web-servers
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      Please provide the package NVR for which the bug is seen: httpd-2.4.62-7.el9

      How reproducible is this bug?: Easy/Always

      Steps to reproduce:

      1. Install httpd: 
        # dnf install httpd
      2. Add the following two lines to  /etc/httpd/conf/httpd.conf:
        TraceEnable off
        ErrorDocument 405 /i/dont/exist
      3. Start httpd:
        # systemctl start httpd
      1.  Use curl to make a trace request and observe the incorrect message:
        $ curl -isX TRACE localhost
        

      Expected results:

      <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
      <html><head>
      <title>405 Method Not Allowed</title>
      </head><body>
      <h1>Method Not Allowed</h1>
      <p>The requested method TRACE is not allowed for the URL /.</p>
      <p>Additionally, a 404 Not Found 
      error was encountered while trying to use an ErrorDocument to handle the request.</p>
      </body></html>
      

      Actual results:

      HTTP/1.1 405 Method Not Allowed
      Date: Thu, 27 Nov 2025 14:23:42 GMT
      Server: Apache/2.4.62 (Red Hat Enterprise Linux)
      Allow: 
      Content-Length: 348
      Content-Type: text/html; charset=iso-8859-1
      
      <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
      <html><head>
      <title>405 Method Not Allowed</title>
      </head><body>
      <h1>Method Not Allowed</h1>
      <p>The requested method GET is not allowed for this URL.</p>
      <p>Additionally, a 405 Method Not Allowed
      error was encountered while trying to use an ErrorDocument to handle the request.</p>
      </body></html>
      

      The patch that fixes this issue was provided with the following PR that has been merged to trunk, however it has not been added to a release yet.
      This issue is being tracked for JBCS in https://issues.redhat.com/browse/JBCS-385 and is actually blocking it, so could you please evaluate adding it to RHEL httpd?

      Thank you,
      Sokratis

              luhliari@redhat.com Lubos Uhliarik
              szappis@redhat.com Sokratis Zappis
              Lubos Uhliarik Lubos Uhliarik
              Branislav Náter Branislav Náter
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated: