Alerts This Week
Warning Icon 1 1,153
Alerts This Week
Warning Icon 1 1,153

Red Hat: RHSA-2007:0556-01 Moderate Httpd Denial of Service Vulnerability

red hat
Calendar Grey June 29, 2007
Dist Redhat Esm H88
Recent Apache httpd updates for Red Hat address several concerns categorized as moderate risk by the Red Hat Security Team.
Updated Apache httpd packages that correct three security issues are now available for Red Hat Enterprise Linux 5.The Apache HTTP Server did not verify that a process was an Apach...

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at

5. Bug IDs fixed (http://bugzilla.redhat.com/):

244658 - CVE-2007-1863 httpd mod_cache segfault 245111 - CVE-2007-3304 httpd scoreboard lack of PID protection 245112 - CVE-2006-5752 httpd mod_status XSS

6. RPMs required:

Red Hat Enterprise Linux Desktop (v. 5 client):

SRPMS: ad994b03f478915b23379e3e341ee9ee httpd-2.2.3-7.el5.src.rpm

i386: 74ee3f1249eb3d86fba24c83279b3445 httpd-2.2.3-7.el5.i386.rpm 7324a7f15396905aa4f652abd6ae8997 httpd-debuginfo-2.2.3-7.el5.i386.rpm 0c8fa982385e4b9588afc1070aece01f mod_ssl-2.2.3-7.el5.i386.rpm

x86_64: 710457b901c4a0c06a6c976facbb415a httpd-2.2.3-7.el5.x86_64.rpm 2c7da4cff9c7a6cd29b15f53a4bbc9d1 httpd-debuginfo-2.2.3-7.el5.x86_64.rpm 362d89be0fca8a6b1be5b46568dee0ff mod_ssl-2.2.3-7.el5.x86_64.rpm

RHEL Desktop Workstation (v. 5 client):

SRPMS: ad994b03f478915b23379e3e341ee9ee httpd-2.2.3-7.el5.src.rpm

i386: 7324a7f15396905aa4f652abd6ae8997 httpd-debuginfo-2.2.3-7.el5.i386.rpm 4d771ee9d3cdd6d76cdb5d20ce4affde httpd-devel-2.2.3-7.el5.i386.rpm 78a2181238e9385797030f7fcb320f2f httpd-manual-2.2.3-7.el5.i386.rpm

x86_64: 7324a7f15396905aa4f652abd6ae8997 httpd-debuginfo-2.2.3-7.el5.i386.rpm 2c7da4cff9c7a6cd29b15f53a4bbc9d1 httpd-debuginfo-2.2.3-7.el5.x86_64.rpm 4d771ee9d3cdd6d76cdb5d20ce4affde httpd-devel-2.2.3-7.el5.i386.rpm 6d7976d018d99369fa452f55c8e36e16 httpd-devel-2.2.3-7.el5.x86_64.rpm 0881f41d5413aedce4e0d70b15d642a3 httpd-manual-2.2.3-7.el5.x86_64.rpm

Red Hat Enterprise Linux (v. 5 server):

SRPMS: ad994b03f478915b23379e3e341ee9ee httpd-2.2.3-7.el5.src.rpm

i386: 74ee3f1249eb3d86fba24c83279b3445 httpd-2.2.3-7.el5.i386.rpm 7324a7f15396905aa4f652abd6ae8997 httpd-debuginfo-2.2.3-7.el5.i386.rpm 4d771ee9d3cdd6d76cdb5d20ce4affde httpd-devel-2.2.3-7.el5.i386.rpm 78a2181238e9385797030f7fcb320f2f httpd-manual-2.2.3-7.el5.i386.rpm 0c8fa982385e4b9588afc1070aece01f mod_ssl-2.2.3-7.el5.i386.rpm

ia64: 248a7a7327a1d08f178cc0db02a0477b httpd-2.2.3-7.el5.ia64.rpm e1eaf23af2f3d28bbf249cdab8754219 httpd-debuginfo-2.2.3-7.el5.ia64.rpm 621cce79561aae4978f3332b48229e1d httpd-devel-2.2.3-7.el5.ia64.rpm fece7006a9de5f39bafae7e39204f9ff httpd-manual-2.2.3-7.el5.ia64.rpm d900b71ead1aa45770aa2da8a3d8f28f mod_ssl-2.2.3-7.el5.ia64.rpm

ppc: 19236403d523300c53abdfa46d84bd7b httpd-2.2.3-7.el5.ppc.rpm 48e8abf813d477093f52a92b9d59f2af httpd-debuginfo-2.2.3-7.el5.ppc.rpm f0380ded67510e411ee68fee763bae71 httpd-debuginfo-2.2.3-7.el5.ppc64.rpm c1d40be71634c12acbae45f45b2f5f40 httpd-devel-2.2.3-7.el5.ppc.rpm 02f42d084e9d2c55fd14a38970539367 httpd-devel-2.2.3-7.el5.ppc64.rpm 83caccb359054de19d8771e5f777d00b httpd-manual-2.2.3-7.el5.ppc.rpm 428fe3736e2e020b098564f3dca46b23 mod_ssl-2.2.3-7.el5.ppc.rpm

s390x: 71ff846b806df174796d7e04c52f6dc2 httpd-2.2.3-7.el5.s390x.rpm dde4ea9a9d2f7ad8a00c948d54deae46 httpd-debuginfo-2.2.3-7.el5.s390.rpm 2bba5ffdfbd137d166e17abc950482fa httpd-debuginfo-2.2.3-7.el5.s390x.rpm 277d59988d338a6034ed6777aeac5457 httpd-devel-2.2.3-7.el5.s390.rpm 88fbf78dc487fd3c9f938709a6f65d48 httpd-devel-2.2.3-7.el5.s390x.rpm 737206e9ef81ebb8c931a24bd041d301 httpd-manual-2.2.3-7.el5.s390x.rpm 5fb8005049ed072357daefe5888a211a mod_ssl-2.2.3-7.el5.s390x.rpm

x86_64: 710457b901c4a0c06a6c976facbb415a httpd-2.2.3-7.el5.x86_64.rpm 7324a7f15396905aa4f652abd6ae8997 httpd-debuginfo-2.2.3-7.el5.i386.rpm 2c7da4cff9c7a6cd29b15f53a4bbc9d1 httpd-debuginfo-2.2.3-7.el5.x86_64.rpm 4d771ee9d3cdd6d76cdb5d20ce4affde httpd-devel-2.2.3-7.el5.i386.rpm 6d7976d018d99369fa452f55c8e36e16 httpd-devel-2.2.3-7.el5.x86_64.rpm 0881f41d5413aedce4e0d70b15d642a3 httpd-manual-2.2.3-7.el5.x86_64.rpm 362d89be0fca8a6b1be5b46568dee0ff mod_ssl-2.2.3-7.el5.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package

Summary

Topics%20covered

Topics Covered

security advisory moderate denial of service Red Hat cross-site scripting httpd

References

https://www.cve.org/CVERecord?id=CVE-2006-5752 https://www.cve.org/CVERecord?id=CVE-2007-1863 https://www.cve.org/CVERecord?id=CVE-2007-3304 https://access.redhat.com/security/updates/classification#moderate

Package List


Advisory ID: RHSA-2007:0556-01
Advisory URL: https://access.redhat.com/errata/RHSA-2007:0556.html
Issue date: 2007-06-26
Updated on: 2007-06-26
Product: Red Hat Enterprise Linux

Topic

Topics%20covered

Topics Covered

security advisory moderate denial of service Red Hat cross-site scripting httpd

Relevant Releases Architectures

Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64

RHEL Desktop Workstation (v. 5 client) - i386, x86_64

Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here