[UCI-Linux] [SECURITY] Fedora Core 2 Update: httpd-2.0.51-2.7

Mike Iglesias IGLESIAS at uci.edu
Thu Sep 23 16:13:16 PDT 2004


Date: Thu, 23 Sep 2004 21:58:59 +0100
From: Joe Orton <jorton at redhat.com>
To: fedora-announce-list at redhat.com
Subject: [SECURITY] Fedora Core 2 Update: httpd-2.0.51-2.7


--===============0489364027==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="huq684BweRXVnRxX"
Content-Disposition: inline


--huq684BweRXVnRxX
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-313
2004-09-23
---------------------------------------------------------------------

Product     : Fedora Core 2
Name        : httpd
Version     : 2.0.51                     =20
Release     : 2.7                 =20
Summary     : Apache HTTP Server
Description :
Apache is a powerful, full-featured, efficient, and freely-available
Web server. Apache is also the most popular Web server on the
Internet.

---------------------------------------------------------------------

This update includes the latest stable release of Apache httpd 2.0,
including fixes for possible denial of service issues in mod_ssl
(CAN-2004-0751, CAN-2004-0747) and mod_dav_fs (CAN-2004-0809), and a
privilege elevation attack for local users (CAN-2004-0747).

Note that these packages do also contain the fix for a regression in
Satisfy handling in the 2.0.51 release (CAN-2004-0811).

---------------------------------------------------------------------

* Tue Sep 21 2004 Joe Orton <jorton at redhat.com> 2.0.51-2.7

- ap_rgetline_core fix from Rici Lake

* Tue Sep 21 2004 Joe Orton <jorton at redhat.com> 2.0.51-2.6

- fix 2.0.51 regression in Satisfy merging (CAN-2004-0811)

* Thu Sep 16 2004 Joe Orton <jorton at redhat.com> 2.0.51-2.5

- mod_ssl: prevent SIGHUP-triggers-SIGSEGV after upgrade from 2.0.50
- revert mod_ldap/mod_auth_ldap changes likewise

* Wed Sep 15 2004 Joe Orton <jorton at redhat.com> 2.0.51-2.1

- update to 2.0.51, including security fixes for:
 * core: CAN-2004-0747
 * mod_dav_fs: CAN-2004-0809
 * mod_ssl: CAN-2004-0751, CAN-2004-0748

---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

99c4698c12b5ce206fe1d421a0d24626  SRPMS/httpd-2.0.51-2.7.src.rpm
e015611ce4a96ef0488eb772d4e20e95  x86_64/httpd-2.0.51-2.7.x86_64.rpm
9d4c7c3db22fe5b8b5db8f0e6229c9c1  x86_64/httpd-devel-2.0.51-2.7.x86_64.rpm
0d5eaca4b6a0ca22dfb164438f0df73d  x86_64/httpd-manual-2.0.51-2.7.x86_64.rpm
6ae2964daebddd4630a143712583929b  x86_64/mod_ssl-2.0.51-2.7.x86_64.rpm
a87b486fe234e674ec7a7040da825874  x86_64/debug/httpd-debuginfo-2.0.51-2.7.x=
86_64.rpm
6ce668b14a339a895c1f94d3d2c74344  i386/httpd-2.0.51-2.7.i386.rpm
bf2d5ce617b715efb85a6bef1dcc1ff6  i386/httpd-devel-2.0.51-2.7.i386.rpm
7fdc3fd7ffd27e10ed608bad819f8203  i386/httpd-manual-2.0.51-2.7.i386.rpm
df387ada50ec5a154d840ae8d3996157  i386/mod_ssl-2.0.51-2.7.i386.rpm
feb541c52c040b0e12c879a3f264f5b7  i386/debug/httpd-debuginfo-2.0.51-2.7.i38=
6.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command. =20
---------------------------------------------------------------------

--huq684BweRXVnRxX
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFBUzkTR/aWnQ5EzwwRAmabAKDMN2vwtr9VcYTiO4z6RS04O+yI5ACfdQmS
a435FP1ed9d4PlMXLmz3wx4=
=I2y4
-----END PGP SIGNATURE-----

--huq684BweRXVnRxX--



--===============0489364027==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
fedora-announce-list mailing list
fedora-announce-list at redhat.com
http://www.redhat.com/mailman/listinfo/fedora-announce-list
--===============0489364027==--



More information about the UCI-Linux mailing list