---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-313
2004-09-23
---------------------------------------------------------------------

Product     : Fedora Core 2
Name        : httpd
Version     : 2.0.51
Release     : 2.7
Summary     : Apache HTTP Server
Description :
Apache is a powerful, full-featured, efficient, and freely-available
Web server. Apache is also the most popular Web server on the
Internet.

---------------------------------------------------------------------

This update includes the latest stable release of Apache httpd 2.0,
including fixes for possible denial of service issues in mod_ssl
(CAN-2004-0751, CAN-2004-0747) and mod_dav_fs (CAN-2004-0809), and a
privilege elevation attack for local users (CAN-2004-0747).

Note that these packages do also contain the fix for a regression in
Satisfy handling in the 2.0.51 release (CAN-2004-0811).

---------------------------------------------------------------------

* Tue Sep 21 2004 Joe Orton <jorton@redhat.com> 2.0.51-2.7

- ap_rgetline_core fix from Rici Lake

* Tue Sep 21 2004 Joe Orton <jorton@redhat.com> 2.0.51-2.6

- fix 2.0.51 regression in Satisfy merging (CAN-2004-0811)

* Thu Sep 16 2004 Joe Orton <jorton@redhat.com> 2.0.51-2.5

- mod_ssl: prevent SIGHUP-triggers-SIGSEGV after upgrade from 2.0.50
- revert mod_ldap/mod_auth_ldap changes likewise

* Wed Sep 15 2004 Joe Orton <jorton@redhat.com> 2.0.51-2.1

- update to 2.0.51, including security fixes for:
 * core: CAN-2004-0747
 * mod_dav_fs: CAN-2004-0809
 * mod_ssl: CAN-2004-0751, CAN-2004-0748

---------------------------------------------------------------------
This update can be downloaded from:
    

99c4698c12b5ce206fe1d421a0d24626  SRPMS/httpd-2.0.51-2.7.src.rpm
e015611ce4a96ef0488eb772d4e20e95  x86_64/httpd-2.0.51-2.7.x86_64.rpm
9d4c7c3db22fe5b8b5db8f0e6229c9c1  x86_64/httpd-devel-2.0.51-2.7.x86_64.rpm
0d5eaca4b6a0ca22dfb164438f0df73d  x86_64/httpd-manual-2.0.51-2.7.x86_64.rpm
6ae2964daebddd4630a143712583929b  x86_64/mod_ssl-2.0.51-2.7.x86_64.rpm
a87b486fe234e674ec7a7040da825874  x86_64/debug/httpd-debuginfo-2.0.51-2.7.x86_64.rpm
6ce668b14a339a895c1f94d3d2c74344  i386/httpd-2.0.51-2.7.i386.rpm
bf2d5ce617b715efb85a6bef1dcc1ff6  i386/httpd-devel-2.0.51-2.7.i386.rpm
7fdc3fd7ffd27e10ed608bad819f8203  i386/httpd-manual-2.0.51-2.7.i386.rpm
df387ada50ec5a154d840ae8d3996157  i386/mod_ssl-2.0.51-2.7.i386.rpm
feb541c52c040b0e12c879a3f264f5b7  i386/debug/httpd-debuginfo-2.0.51-2.7.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------

Fedora: httpd update

September 23, 2004
This update includes the latest stable release of Apache httpd 2.0, including fixes for possible denial of service issues in mod_ssl (CAN-2004-0751, CAN-2004-0747) and mod_dav_fs (...

Summary

Apache is a powerful, full-featured, efficient, and freely-available

Web server. Apache is also the most popular Web server on the

Internet.

This update includes the latest stable release of Apache httpd 2.0,

including fixes for possible denial of service issues in mod_ssl

(CAN-2004-0751, CAN-2004-0747) and mod_dav_fs (CAN-2004-0809), and a

privilege elevation attack for local users (CAN-2004-0747).

Note that these packages do also contain the fix for a regression in

Satisfy handling in the 2.0.51 release (CAN-2004-0811).

* Tue Sep 21 2004 Joe Orton <jorton@redhat.com> 2.0.51-2.7

- ap_rgetline_core fix from Rici Lake

* Tue Sep 21 2004 Joe Orton <jorton@redhat.com> 2.0.51-2.6

- fix 2.0.51 regression in Satisfy merging (CAN-2004-0811)

* Thu Sep 16 2004 Joe Orton <jorton@redhat.com> 2.0.51-2.5

- mod_ssl: prevent SIGHUP-triggers-SIGSEGV after upgrade from 2.0.50

- revert mod_ldap/mod_auth_ldap changes likewise

* Wed Sep 15 2004 Joe Orton <jorton@redhat.com> 2.0.51-2.1

- update to 2.0.51, including security fixes for:

* core: CAN-2004-0747

* mod_dav_fs: CAN-2004-0809

* mod_ssl: CAN-2004-0751, CAN-2004-0748

This update can be downloaded from:

99c4698c12b5ce206fe1d421a0d24626 SRPMS/httpd-2.0.51-2.7.src.rpm

e015611ce4a96ef0488eb772d4e20e95 x86_64/httpd-2.0.51-2.7.x86_64.rpm

9d4c7c3db22fe5b8b5db8f0e6229c9c1 x86_64/httpd-devel-2.0.51-2.7.x86_64.rpm

0d5eaca4b6a0ca22dfb164438f0df73d x86_64/httpd-manual-2.0.51-2.7.x86_64.rpm

6ae2964daebddd4630a143712583929b x86_64/mod_ssl-2.0.51-2.7.x86_64.rpm

a87b486fe234e674ec7a7040da825874 x86_64/debug/httpd-debuginfo-2.0.51-2.7.x86_64.rpm

6ce668b14a339a895c1f94d3d2c74344 i386/httpd-2.0.51-2.7.i386.rpm

bf2d5ce617b715efb85a6bef1dcc1ff6 i386/httpd-devel-2.0.51-2.7.i386.rpm

7fdc3fd7ffd27e10ed608bad819f8203 i386/httpd-manual-2.0.51-2.7.i386.rpm

df387ada50ec5a154d840ae8d3996157 i386/mod_ssl-2.0.51-2.7.i386.rpm

feb541c52c040b0e12c879a3f264f5b7 i386/debug/httpd-debuginfo-2.0.51-2.7.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

Fedora Update Notification FEDORA-2004-313 2004-09-23 Product : Fedora Core 2 Name : httpd Version : 2.0.51 Release : 2.7 Summary : Apache HTTP Server Description : Apache is a powerful, full-featured, efficient, and freely-available Web server. Apache is also the most popular Web server on the Internet. This update includes the latest stable release of Apache httpd 2.0, including fixes for possible denial of service issues in mod_ssl (CAN-2004-0751, CAN-2004-0747) and mod_dav_fs (CAN-2004-0809), and a privilege elevation attack for local users (CAN-2004-0747). Note that these packages do also contain the fix for a regression in Satisfy handling in the 2.0.51 release (CAN-2004-0811). * Tue Sep 21 2004 Joe Orton <jorton@redhat.com> 2.0.51-2.7 - ap_rgetline_core fix from Rici Lake * Tue Sep 21 2004 Joe Orton <jorton@redhat.com> 2.0.51-2.6 - fix 2.0.51 regression in Satisfy merging (CAN-2004-0811) * Thu Sep 16 2004 Joe Orton <jorton@redhat.com> 2.0.51-2.5 - mod_ssl: prevent SIGHUP-triggers-SIGSEGV after upgrade from 2.0.50 - revert mod_ldap/mod_auth_ldap changes likewise * Wed Sep 15 2004 Joe Orton <jorton@redhat.com> 2.0.51-2.1 - update to 2.0.51, including security fixes for: * core: CAN-2004-0747 * mod_dav_fs: CAN-2004-0809 * mod_ssl: CAN-2004-0751, CAN-2004-0748 This update can be downloaded from: 99c4698c12b5ce206fe1d421a0d24626 SRPMS/httpd-2.0.51-2.7.src.rpm e015611ce4a96ef0488eb772d4e20e95 x86_64/httpd-2.0.51-2.7.x86_64.rpm 9d4c7c3db22fe5b8b5db8f0e6229c9c1 x86_64/httpd-devel-2.0.51-2.7.x86_64.rpm 0d5eaca4b6a0ca22dfb164438f0df73d x86_64/httpd-manual-2.0.51-2.7.x86_64.rpm 6ae2964daebddd4630a143712583929b x86_64/mod_ssl-2.0.51-2.7.x86_64.rpm a87b486fe234e674ec7a7040da825874 x86_64/debug/httpd-debuginfo-2.0.51-2.7.x86_64.rpm 6ce668b14a339a895c1f94d3d2c74344 i386/httpd-2.0.51-2.7.i386.rpm bf2d5ce617b715efb85a6bef1dcc1ff6 i386/httpd-devel-2.0.51-2.7.i386.rpm 7fdc3fd7ffd27e10ed608bad819f8203 i386/httpd-manual-2.0.51-2.7.i386.rpm df387ada50ec5a154d840ae8d3996157 i386/mod_ssl-2.0.51-2.7.i386.rpm feb541c52c040b0e12c879a3f264f5b7 i386/debug/httpd-debuginfo-2.0.51-2.7.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.

Change Log

References

Update Instructions

Severity
Product : Fedora Core 2
Name : httpd
Version : 2.0.51
Release : 2.7
Summary : Apache HTTP Server

Related News