Login
Newsletter
Werbung

Sicherheit: Mehrere Probleme in apache2
Aktuelle Meldungen Distributionen
Name: Mehrere Probleme in apache2
ID: FEDORA-2004-313
Distribution: Fedora
Plattformen: Fedora Core 2
Datum: Fr, 24. September 2004, 13:00
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0747
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0751
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0809
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0811
Applikationen: Apache

Originalnachricht

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-313
2004-09-23
---------------------------------------------------------------------

Product : Fedora Core 2
Name : httpd
Version : 2.0.51
Release : 2.7
Summary : Apache HTTP Server
Description :
Apache is a powerful, full-featured, efficient, and freely-available
Web server. Apache is also the most popular Web server on the
Internet.

---------------------------------------------------------------------

This update includes the latest stable release of Apache httpd 2.0,
including fixes for possible denial of service issues in mod_ssl
(CAN-2004-0751, CAN-2004-0747) and mod_dav_fs (CAN-2004-0809), and a
privilege elevation attack for local users (CAN-2004-0747).

Note that these packages do also contain the fix for a regression in
Satisfy handling in the 2.0.51 release (CAN-2004-0811).

---------------------------------------------------------------------

* Tue Sep 21 2004 Joe Orton <jorton@redhat.com> 2.0.51-2.7

- ap_rgetline_core fix from Rici Lake

* Tue Sep 21 2004 Joe Orton <jorton@redhat.com> 2.0.51-2.6

- fix 2.0.51 regression in Satisfy merging (CAN-2004-0811)

* Thu Sep 16 2004 Joe Orton <jorton@redhat.com> 2.0.51-2.5

- mod_ssl: prevent SIGHUP-triggers-SIGSEGV after upgrade from 2.0.50
- revert mod_ldap/mod_auth_ldap changes likewise

* Wed Sep 15 2004 Joe Orton <jorton@redhat.com> 2.0.51-2.1

- update to 2.0.51, including security fixes for:
* core: CAN-2004-0747
* mod_dav_fs: CAN-2004-0809
* mod_ssl: CAN-2004-0751, CAN-2004-0748

---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

99c4698c12b5ce206fe1d421a0d24626 SRPMS/httpd-2.0.51-2.7.src.rpm
e015611ce4a96ef0488eb772d4e20e95 x86_64/httpd-2.0.51-2.7.x86_64.rpm
9d4c7c3db22fe5b8b5db8f0e6229c9c1 x86_64/httpd-devel-2.0.51-2.7.x86_64.rpm
0d5eaca4b6a0ca22dfb164438f0df73d x86_64/httpd-manual-2.0.51-2.7.x86_64.rpm
6ae2964daebddd4630a143712583929b x86_64/mod_ssl-2.0.51-2.7.x86_64.rpm
a87b486fe234e674ec7a7040da825874
x86_64/debug/httpd-debuginfo-2.0.51-2.7.x86_64.rpm
6ce668b14a339a895c1f94d3d2c74344 i386/httpd-2.0.51-2.7.i386.rpm
bf2d5ce617b715efb85a6bef1dcc1ff6 i386/httpd-devel-2.0.51-2.7.i386.rpm
7fdc3fd7ffd27e10ed608bad819f8203 i386/httpd-manual-2.0.51-2.7.i386.rpm
df387ada50ec5a154d840ae8d3996157 i386/mod_ssl-2.0.51-2.7.i386.rpm
feb541c52c040b0e12c879a3f264f5b7
i386/debug/httpd-debuginfo-2.0.51-2.7.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------



--
fedora-announce-list mailing list
fedora-announce-list@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-announce-list
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung