Red Hat: RHSA-2007:0746-04 Moderate: Apache DoS Issue in Httpd

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at

5. Bug IDs fixed (http://bugzilla.redhat.com/):

240024 - Mod_proxy_http ProxyErrorOverride eating cookies 240857 - [RFE] Apache does not report patch level when scanned 241680 - logrotate.d/httpd postrotate must use initscripts 245719 - mod_proxy configuration inheritance issue 245763 - long lines incorrectly handled by Apache's logresolve 250731 - CVE-2007-3847 httpd out of bounds read

6. RPMs required:

Red Hat Enterprise Linux Desktop (v. 5 client):

SRPMS: 3ee6039a6aa2beeb14c55695c48cb6be httpd-2.2.3-11.el5.src.rpm

i386: d734aeef038abf88bf4886911c124c7a httpd-2.2.3-11.el5.i386.rpm b16e49ba0ee29fe72b5df11fd928a361 httpd-debuginfo-2.2.3-11.el5.i386.rpm 86a4778fab59148114af83ba1eca224f mod_ssl-2.2.3-11.el5.i386.rpm

x86_64: 0030021cc1bc50b7c1d149f7c228d68a httpd-2.2.3-11.el5.x86_64.rpm 04c060ef39947d8a03756456fe013c31 httpd-debuginfo-2.2.3-11.el5.x86_64.rpm fd20a69dc6b00651fae0d0d86511b867 mod_ssl-2.2.3-11.el5.x86_64.rpm

RHEL Desktop Workstation (v. 5 client):

SRPMS: 3ee6039a6aa2beeb14c55695c48cb6be httpd-2.2.3-11.el5.src.rpm

i386: b16e49ba0ee29fe72b5df11fd928a361 httpd-debuginfo-2.2.3-11.el5.i386.rpm 2295f9d39e5e87fa8843f5c6158e2afb httpd-devel-2.2.3-11.el5.i386.rpm c994b3e5b0e2ff8102043792505c91d4 httpd-manual-2.2.3-11.el5.i386.rpm

x86_64: b16e49ba0ee29fe72b5df11fd928a361 httpd-debuginfo-2.2.3-11.el5.i386.rpm 04c060ef39947d8a03756456fe013c31 httpd-debuginfo-2.2.3-11.el5.x86_64.rpm 2295f9d39e5e87fa8843f5c6158e2afb httpd-devel-2.2.3-11.el5.i386.rpm 4603c4e041958a602c4bad393c90c6a7 httpd-devel-2.2.3-11.el5.x86_64.rpm 07e2c67b68e178bac107a3e61a929f23 httpd-manual-2.2.3-11.el5.x86_64.rpm

Red Hat Enterprise Linux (v. 5 server):

SRPMS: 3ee6039a6aa2beeb14c55695c48cb6be httpd-2.2.3-11.el5.src.rpm

i386: d734aeef038abf88bf4886911c124c7a httpd-2.2.3-11.el5.i386.rpm b16e49ba0ee29fe72b5df11fd928a361 httpd-debuginfo-2.2.3-11.el5.i386.rpm 2295f9d39e5e87fa8843f5c6158e2afb httpd-devel-2.2.3-11.el5.i386.rpm c994b3e5b0e2ff8102043792505c91d4 httpd-manual-2.2.3-11.el5.i386.rpm 86a4778fab59148114af83ba1eca224f mod_ssl-2.2.3-11.el5.i386.rpm

ia64: c56a478f241fae66e5a98d9a7160c079 httpd-2.2.3-11.el5.ia64.rpm 384dbc9996ce2fd456639a40a34ac765 httpd-debuginfo-2.2.3-11.el5.ia64.rpm 505c228afa459feb3273e1cea8e2be82 httpd-devel-2.2.3-11.el5.ia64.rpm 401a8cbb5de0e8db47c2ddb0c8373525 httpd-manual-2.2.3-11.el5.ia64.rpm fcec7364955523f2d57ccb51e43ad811 mod_ssl-2.2.3-11.el5.ia64.rpm

ppc: 487e19dc73a7f1243fc380ec848c9ed8 httpd-2.2.3-11.el5.ppc.rpm 7a754add4fefa8284bf113f064c0fcc7 httpd-debuginfo-2.2.3-11.el5.ppc.rpm f119c96226df58f9d77a5a8c3c218f1f httpd-debuginfo-2.2.3-11.el5.ppc64.rpm 07427ada748e7b16d2561534a14a02cf httpd-devel-2.2.3-11.el5.ppc.rpm 4997b231b3653909aa8f09dfc4635345 httpd-devel-2.2.3-11.el5.ppc64.rpm 61b181d0f1bd39bbfa7909f1af0f5f12 httpd-manual-2.2.3-11.el5.ppc.rpm 2a9afa90dbde5d937b9c63b02ad86b8c mod_ssl-2.2.3-11.el5.ppc.rpm

s390x: 268a9c1257e6630d2630919609defbaf httpd-2.2.3-11.el5.s390x.rpm 1896c36a9bdefb2f024c3daea65673cc httpd-debuginfo-2.2.3-11.el5.s390.rpm 775f81a39195c275e76f6792d68c54a2 httpd-debuginfo-2.2.3-11.el5.s390x.rpm 2cca0b16331ad72d7187f5311e38d919 httpd-devel-2.2.3-11.el5.s390.rpm bfadb9ae50a4f5f9f55a9c486afaf916 httpd-devel-2.2.3-11.el5.s390x.rpm a88989c4b428cf512189c317e16eb70c httpd-manual-2.2.3-11.el5.s390x.rpm 0ada06035539671248eda54a10e4c654 mod_ssl-2.2.3-11.el5.s390x.rpm

x86_64: 0030021cc1bc50b7c1d149f7c228d68a httpd-2.2.3-11.el5.x86_64.rpm b16e49ba0ee29fe72b5df11fd928a361 httpd-debuginfo-2.2.3-11.el5.i386.rpm 04c060ef39947d8a03756456fe013c31 httpd-debuginfo-2.2.3-11.el5.x86_64.rpm 2295f9d39e5e87fa8843f5c6158e2afb httpd-devel-2.2.3-11.el5.i386.rpm 4603c4e041958a602c4bad393c90c6a7 httpd-devel-2.2.3-11.el5.x86_64.rpm 07e2c67b68e178bac107a3e61a929f23 httpd-manual-2.2.3-11.el5.x86_64.rpm fd20a69dc6b00651fae0d0d86511b867 mod_ssl-2.2.3-11.el5.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package