Fedora: FEDORA-2004-118 Moderate: Apache httpd Memory Leak Fix

Apache is a powerful, full-featured, efficient, and freely-available

Web server. Apache is also the most popular Web server on the

Internet.

This update includes the latest stable release of Apache httpd 2.0, including a security fix for a memory leak in mod_ssl which can be triggered remotely (CVE CAN-2004-0113), and a fix for escaping of error log output (CVE CAN-2003-0020).

This update also includes an enhanced version of the mod_cgi module which fixes a long-standing bug in the handling of stderr output during CGI script execution.

* Fri May 07 2004 Joe Orton <jorton@redhat.com> 2.0.49-1.1

- fix 2.0.48's httpd loading 2.0.49's mod_expires.so

* Fri May 07 2004 Joe Orton <jorton@redhat.com> 2.0.49-1.0

- update to 2.0.49 (thanks to Robert Scheck, #118798) - make "noindex" page valid XHTML 1.1 (Pascal Volk, #122020) - restore /etc/httpd/build/libtool symlink (#113720) - mod_cgi: backport fixes for stderr handling (upstream #22030) - mod_dav: misc improvements - add rgetline NUL-termination fixes (Tsurutani Naoki, upstream #28376)

This update can be downloaded from:

b008b66b5af9ce253a53a805919a6814 SRPMS/http...