Hey Guys! httpd-itk looks like it's based on an old FC spec for 2.2.22, or some such. httpd-itk requires httpd. The changes RedHat made in 2.2.15-31 (that is, RHSA-2014-0920) appear to have broken some symbols in the mod_status .so:

[scott@scott SPECS]$ sudo /etc/rc.d/init.d/httpd restart Stopping httpd: [ OK ] Starting httpd: httpd.itk: Syntax error on line 178 of /etc/httpd/conf/httpd.conf: Cannot load /etc/httpd/modules/mod_status.so into server: /etc/httpd/modules/mod_status.so: undefined symbol: ap_copy_scoreboard_worker [FAILED] [scott@scott SPECS]$

A few people have encountered this, see https://bugzilla.redhat.com/show_bug.cgi?id=1123504

I think I can fix this by taking the new patches out of 2.2.15-31 and rebuilding 2.2.22 with them (with the exception of one patch that's not coming cleanly, in that case I grabbed a patch for the same CVE from a JBoss src that belonged to a 2.2.22 httpd). So far, I've done this, and the RPM builds cleanly and httpd starts. I'll be doing some more testing tomorrow to make sure it leaves things in a good state.

Is this the best approach? Or would it be better to wait for someone else to handle this?

-scott