[SECURITY] Fedora Core 4 Test Update: httpd-2.0.54-10.2
Joseph Orton
jorton at redhat.com
Tue Sep 6 05:39:04 UTC 2005
---------------------------------------------------------------------
Fedora Test Update Notification
FEDORA-2005-849
2005-09-06
---------------------------------------------------------------------
Product : Fedora Core 4
Name : httpd
Version : 2.0.54
Release : 10.2
Summary : Apache HTTP Server
Description :
The Apache HTTP Server is a powerful, full-featured, efficient, and
freely-available Web server. The Apache HTTP Server is also the
most popular Web server on the Internet.
---------------------------------------------------------------------
Update Information:
This update includes two security fixes. An issue was
discovered in mod_ssl where "SSLVerifyClient require" would
not be honoured in location context if the virtual host had
"SSLVerifyClient optional" configured (CAN-2005-2700). An
issue was discovered in memory consumption of the byterange
filter for dynamic resources such as PHP or CGI script
(CAN-2005-2728).
---------------------------------------------------------------------
* Fri Sep 2 2005 Joe Orton <jorton at redhat.com> 2.0.54-10.2
- mod_ssl: add security fix for SSLVerifyClient (#167196, CVE CAN-2005-2700)
- add security fix for byterange filter DoS (#167104, CVE CAN-2005-2728)
- add fix for dummy connection handling (#167425)
- mod_ldap/mod_auth_ldap: add fixes from 2.0.x branch (upstream #34209 etc)
- mod_ssl: add fix for handling non-blocking reads
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/4/
88c9dc7a948a62cea2ffb13277910a01 SRPMS/httpd-2.0.54-10.2.src.rpm
478988ab42a03029c8699c291fa1009d ppc/httpd-2.0.54-10.2.ppc.rpm
306609575dd281ae33dd27da4691a08b ppc/httpd-devel-2.0.54-10.2.ppc.rpm
c742ad0767f3364b4e396ceed05a7b19 ppc/httpd-manual-2.0.54-10.2.ppc.rpm
c1d1e573fa195b0c2eda8101839b6182 ppc/mod_ssl-2.0.54-10.2.ppc.rpm
6bd85e61482f620a29f3667594486047 ppc/debug/httpd-debuginfo-2.0.54-10.2.ppc.rpm
d3f930f3c97aa01bd770f8720b3b178b x86_64/httpd-2.0.54-10.2.x86_64.rpm
703c9f70e8f3613f7bc1c0c6ce082c82 x86_64/httpd-devel-2.0.54-10.2.x86_64.rpm
09cee26eb56dda9027c6e55fac27db4b x86_64/httpd-manual-2.0.54-10.2.x86_64.rpm
30f6ab1c98f37834d4c4013884edc1e7 x86_64/mod_ssl-2.0.54-10.2.x86_64.rpm
d0feb8092ec5074e607536d892598d49 x86_64/debug/httpd-debuginfo-2.0.54-10.2.x86_64.rpm
25ec9c57a593ca361c7242d95b69b951 i386/httpd-2.0.54-10.2.i386.rpm
523575a926b3d6d94b62f82529c1a711 i386/httpd-devel-2.0.54-10.2.i386.rpm
c9a91011459628b797bcad0baff99bf1 i386/httpd-manual-2.0.54-10.2.i386.rpm
829ca7551f4395544a98a486387cf594 i386/mod_ssl-2.0.54-10.2.i386.rpm
5da6482d85a80644b94434080cc9d22c i386/debug/httpd-debuginfo-2.0.54-10.2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command. You may
need to edit your up2date channels configuration. Within
/etc/sysconfig/rhn/sources enable the following line:
yum updates-testing http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/4/$ARCH
---------------------------------------------------------------------
More information about the fedora-test-list
mailing list