New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] httpd (SSA:2019-096-01) New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/httpd-2.4.39-i586-1_slack14.2.txz: Upgraded. This release contains security fixes and improvements. In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process by manipulating the scoreboard. For more information, see: https://www.cve.org/CVERecord?id=CVE-2019-0211 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 14.0: Updated package for Slackware x86_64 14.0: Updated package for Slackware 14.1: Updated package for Slackware x86_64 14.1: Updated package for Slackware 14.2: Updated package for Slackware x86_64 14.2: Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 14.0 package: ef8dc6c74f67c20f69e45d367c69d91e httpd-2.4.39-i486-1_slack14.0.txz Slackware x86_64 14.0 package: 213e093ac572698139ce27bf378a0bec httpd-2.4.39-x86_64-1_slack14.0.txz Slackware 14.1 package: 4191bba2f5d138a5bfd7a65e7d8a01cc httpd-2.4.39-i486-1_slack14.1.txz Slackware x86_64 14.1 package: 177aaf7e527a5eb2c4de2b6f1b6d03ea httpd-2.4.39-x86_64-1_slack14.1.txz Slackware 14.2 package: d9b05dfe83204233ab7c4ffa46ee8936 httpd-2.4.39-i586-1_slack14.2.txz Slackware x86_64 14.2 package: 7f21336828b6b8db4ffd74d3ffadf249 httpd-2.4.39-x86_64-1_slack14.2.txz Slackware -current package: 002df106ca8a8ce88cf6abbe5dd7518a n/httpd-2.4.39-i586-1.txz Slackware x86_64 -current package: d1ed25cdbb792326e2fe3f7f28a3d901 n/httpd-2.4.39-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg httpd-2.4.39-i586-1_slack14.2.txz Then, restart Apache httpd: # /etc/rc.d/rc.httpd stop # /etc/rc.d/rc.httpd start +-----+ . Updated httpd packages for Slackware address severe security vulnerabilities impacting Apache HTTP Server versions.. Slackware Security, HTTPD Packages, Apache Update, Security Patch, Code Execution. . Severity: Important. LinuxSecurity.com Team
New httpd packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] httpd (SSA:2014-204-01) New httpd packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/httpd-2.4.10-i486-1_slack14.1.txz: Upgraded. This update fixes the following security issues: *) SECURITY: CVE-2014-0117 (cve.mitre.org) mod_proxy: Fix crash in Connection header handling which allowed a denial of service attack against a reverse proxy with a threaded MPM. [Ben Reser] *) SECURITY: CVE-2014-0118 (cve.mitre.org) mod_deflate: The DEFLATE input filter (inflates request bodies) now limits the length and compression ratio of inflated request bodies to avoid denial of sevice via highly compressed bodies. See directives DeflateInflateLimitRequestBody, DeflateInflateRatioLimit, and DeflateInflateRatioBurst. [Yann Ylavic, Eric Covener] *) SECURITY: CVE-2014-0226 (cve.mitre.org) Fix a race condition in scoreboard handling, which could lead to a heap buffer overflow. [Joe Orton, Eric Covener] *) SECURITY: CVE-2014-0231 (cve.mitre.org) mod_cgid: Fix a denial of service against CGI scripts that do not consume stdin that could lead to lingering HTTPD child processes filling up the scoreboard and eventually hanging the server. By default, the client I/O timeout (Timeout directive) now applies to communication with scripts. The CGIDScriptTimeout directive can be used to set a different timeout for communication with scripts. [Rainer Jung, Eric Covener, Yann Ylavic] For more information, see: https://www.cve.org/CVERecord?id=CVE-2014-0117 https://www.cve.org/CVERecord?id=CVE-2014-0118 https://www.cve.org/CVERecord?id=CVE-2014-0226 https://www.cve.org/CVERecord?id=CVE-2014-0231 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 13.0: Updated package for Slackware x86_64 13.0: Updated package for Slackware 13.1: Updated package for Slackware x86_64 13.1: Updated package for Slackware 13.37: Updated package for Slackware x86_64 13.37: Updated package for Slackware 14.0: Updated package for Slackware x86_64 14.0: Updated package for Slackware 14.1: Updated package for Slackware x86_64 14.1: Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 13.0 package: c79e696c379625efd18e6414f30dba80 httpd-2.2.27-i486-1_slack13.0.txz Slackware x86_64 13.0 package: 28be181b3a0aae494371279230f190e9 httpd-2.2.27-x86_64-1_slack13.0.txz Slackware 13.1 package: fc409fff4d79cb1969a40756f8a9f576 httpd-2.2.27-i486-1_slack13.1.txz Slackware x86_64 13.1 package: 07ab0f3337fc15656cd2e841c9b0eba4 httpd-2.2.27-x86_64-1_slack13.1.txz Slackware 13.37 package: b5cefd8903745aceaa68b482cb63e4e2 httpd-2.2.27-i486-1_slack13.37.txz Slackware x86_64 13.37 package: 610a33703e7f84fd14f09bc9529c1cd5 httpd-2.2.27-x86_64-1_slack13.37.txz Slackware 14.0 package: d6dedc1064a6a4d039b188fed02de89b httpd-2.4.10-i486-1_slack14.0.txz Slackware x86_64 14.0 package: 7d150bf3bd558bf70ea2c21a08a1b5b7 httpd-2.4.10-x86_64-1_slack14.0.txz Slackware 14.1 package: 7e9b03930b0452a95595a61cf1b093d8 httpd-2.4.10-i486-1_slack14.1.txz Slackware x86_64 14.1 package: efc9893a3428d87a8d78787fbde793e0 httpd-2.4.10-x86_64-1_slack14.1.txz Slackware -current package: 1ac5a4cc6275c8f7cfa6e3a77a27f2db n/httpd-2.4.10-i486-1.txz Slackware x86_64 -currentpackage: 7fa5fda601a324238f5a2768204a7476 n/httpd-2.4.10-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg httpd-2.4.10-i486-1_slack14.1.txz Then, restart Apache httpd: # /etc/rc.d/rc.httpd stop # /etc/rc.d/rc.httpd start +-----+ . Recent updates to the httpd packages tackle a range of security vulnerabilities in Slackware, enhancing overall system reliability and protection for users.. httpd updates, Slackware security, denial of service fix, package management. . Severity: Important. LinuxSecurity.com Team
The Apache web server was updated to fix various security issues: The Apache web server was updated to fix various security issues: - the option IncludesNOEXEC could be bypassed via .htaccess (CVE-2009-1195) - the option IncludesNOEXEC could be bypassed via .htaccess (CVE-2009-1195) - mod_proxy could run into an infinite loop when used as reverse proxy(CVE-2009-1890) - mod_deflate continued to co [More...]. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Announcement Package: apache2,libapr1 Announcement ID: SUSE-SA:2009:050 Date: Mon, 26 Oct 2009 12:00:00 +0000 Affected Products: openSUSE 10.3 openSUSE 11.0 openSUSE 11.1 SUSE SLES 9 Novell Linux Desktop 9 Open Enterprise Server Novell Linux POS 9 SLE SDK 10 SP2 SLE SDK 10 SP3 SUSE Linux Enterprise Desktop 10 SP2 SUSE Linux Enterprise Desktop 10 SP3 SUSE Linux Enterprise 10 SP2 DEBUGINFO SUSE Linux Enterprise Server 10 SP2 SUSE Linux Enterprise 10 SP3 DEBUGINFO SUSE Linux Enterprise Server 10 SP3 SLES 11 DEBUGINFO SLE 11 SLES 11 Vulnerability Type: potential code execution remote denial of service Severity (1-10): 8 SUSE Default Package: no Cross-References: CVE-2009-1195, CVE-2009-1890, CVE-2009-1891 CVE-2009-2412,CVE-2009-3094, CVE-2009-3095 Content of This Advisory: 1) Security Vulnerability Resolved: Apache and libapr1 security updates Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security Summary Report. 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion The Apache web server was updated to fix various security issues: - the option IncludesNOEXEC could be bypassed via .htaccess (CVE-2009-1195) - mod_proxy could run into an infinite loop when used as reverse proxy (CVE-2009-1890) - mod_deflate continued to compress large files even after a network connection was closed, causing mod_deflate to consume large amounts of CPU (CVE-2009-1891) - The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command. (CVE-2009-3094) - access restriction bypass in mod_proxy_ftp module (CVE-2009-3095) Also the libapr1 and libapr-util1 Apache helper libraries were updated to fix multiple integer overflows that could probably be used to execute arbitrary code remotely. (CVE-2009-2412) 2) Solution or Work-Around There is no known workaround, please install the update packages. 3) Special Instructions and Notes Please close and restart all running instances of Apache after the update. 4) Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv to apply the update, replacing with the filename of the downloaded RPM package. x86 Platform: openSUSE 11.1: http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/i586/apache2-debuginfo-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/i586/apache2-debugsource-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/i586/libapr-util1-debuginfo-1.3.4-13.3.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/i586/libapr-util1-debugsource-1.3.4-13.3.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/i586/libapr1-debuginfo-1.3.3-12.2.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/i586/libapr1-debugsource-1.3.3-12.2.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/apache2-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/apache2-devel-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/apache2-doc-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/apache2-example-pages-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/apache2-prefork-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/apache2-utils-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/apache2-worker-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/libapr-util1-1.3.4-13.3.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/libapr-util1-dbd-mysql-1.3.4-13.3.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/libapr-util1-dbd-pgsql-1.3.4-13.3.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/libapr-util1-dbd-sqlite3-1.3.4-13.3.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/libapr-util1-devel-1.3.4-13.3.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/libapr1-1.3.3-12.2.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/libapr1-devel-1.3.3-12.2.1.i586.rpm openSUSE 11.0: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/apache2-2.2.8-28.8.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/apache2-devel-2.2.8-28.8.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/apache2-doc-2.2.8-28.8.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/apache2-example-pages-2.2.8-28.8.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/apache2-prefork-2.2.8-28.8.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/apache2-utils-2.2.8-28.8.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/apache2-worker-2.2.8-28.8.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/libapr-util1-1.2.12-43.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/libapr-util1-dbd-mysql-1.2.12-43.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/libapr-util1-dbd-pgsql-1.2.12-43.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/libapr-util1-dbd-sqlite3-1.2.12-43.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/libapr-util1-devel-1.2.12-43.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/libapr1-1.2.12-27.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/libapr1-devel-1.2.12-27.2.i586.rpm openSUSE 10.3: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/apache2-2.2.4-70.11.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/apache2-devel-2.2.4-70.11.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/apache2-doc-2.2.4-70.11.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/apache2-example-pages-2.2.4-70.11.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/apache2-prefork-2.2.4-70.11.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/apache2-utils-2.2.4-70.11.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/apache2-worker-2.2.4-70.11.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/libapr-util1-1.2.8-68.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/libapr-util1-dbd-mysql-1.2.8-68.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/libapr-util1-dbd-pgsql-1.2.8-68.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/libapr-util1-dbd-sqlite3-1.2.8-68.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/libapr-util1-devel-1.2.8-68.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/libapr1-1.2.9-9.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/libapr1-devel-1.2.9-9.2.i586.rpm Power PC Platform: openSUSE 11.1: http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/ppc/apache2-debuginfo-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/ppc/apache2-debugsource-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/ppc/libapr-util1-debuginfo-1.3.4-13.3.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/ppc/libapr-util1-debugsource-1.3.4-13.3.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/ppc/libapr1-debuginfo-1.3.3-12.2.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/ppc/libapr1-debugsource-1.3.3-12.2.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/apache2-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/apache2-devel-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/apache2-doc-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/apache2-example-pages-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/apache2-prefork-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/apache2-utils-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/apache2-worker-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/libapr-util1-1.3.4-13.3.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/libapr-util1-dbd-mysql-1.3.4-13.3.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/libapr-util1-dbd-pgsql-1.3.4-13.3.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/libapr-util1-dbd-sqlite3-1.3.4-13.3.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/libapr-util1-devel-1.3.4-13.3.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/libapr1-1.3.3-12.2.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/libapr1-devel-1.3.3-12.2.1.ppc.rpm openSUSE 11.0: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/apache2-2.2.8-28.8.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/apache2-devel-2.2.8-28.8.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/apache2-doc-2.2.8-28.8.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/apache2-example-pages-2.2.8-28.8.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/apache2-prefork-2.2.8-28.8.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/apache2-utils-2.2.8-28.8.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/apache2-worker-2.2.8-28.8.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr-util1-1.2.12-43.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr-util1-64bit-1.2.12-43.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr-util1-dbd-mysql-1.2.12-43.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr-util1-dbd-pgsql-1.2.12-43.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr-util1-dbd-sqlite3-1.2.12-43.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr-util1-devel-1.2.12-43.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr-util1-devel-64bit-1.2.12-43.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr1-1.2.12-27.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr1-64bit-1.2.12-27.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr1-devel-1.2.12-27.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr1-devel-64bit-1.2.12-27.2.ppc.rpm openSUSE 10.3: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/apache2-2.2.4-70.11.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/apache2-devel-2.2.4-70.11.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/apache2-doc-2.2.4-70.11.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/apache2-example-pages-2.2.4-70.11.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/apache2-prefork-2.2.4-70.11.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/apache2-utils-2.2.4-70.11.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/apache2-worker-2.2.4-70.11.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr-util1-1.2.8-68.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr-util1-64bit-1.2.8-68.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr-util1-dbd-mysql-1.2.8-68.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr-util1-dbd-pgsql-1.2.8-68.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr-util1-dbd-sqlite3-1.2.8-68.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr-util1-devel-1.2.8-68.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr-util1-devel-64bit-1.2.8-68.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr1-1.2.9-9.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr1-64bit-1.2.9-9.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr1-devel-1.2.9-9.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr1-devel-64bit-1.2.9-9.2.ppc.rpm x86-64 Platform: openSUSE 11.1: http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/x86_64/apache2-debuginfo-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/x86_64/apache2-debugsource-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/x86_64/libapr-util1-debuginfo-1.3.4-13.3.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/x86_64/libapr-util1-debugsource-1.3.4-13.3.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/x86_64/libapr1-debuginfo-1.3.3-12.2.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/x86_64/libapr1-debugsource-1.3.3-12.2.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/apache2-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/apache2-devel-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/apache2-doc-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/apache2-example-pages-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/apache2-prefork-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/apache2-utils-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/apache2-worker-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/libapr-util1-1.3.4-13.3.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/libapr-util1-dbd-mysql-1.3.4-13.3.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/libapr-util1-dbd-pgsql-1.3.4-13.3.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/libapr-util1-dbd-sqlite3-1.3.4-13.3.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/libapr-util1-devel-1.3.4-13.3.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/libapr1-1.3.3-12.2.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/libapr1-devel-1.3.3-12.2.1.x86_64.rpm openSUSE 11.0: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/apache2-2.2.8-28.8.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/apache2-devel-2.2.8-28.8.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/apache2-doc-2.2.8-28.8.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/apache2-example-pages-2.2.8-28.8.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/apache2-prefork-2.2.8-28.8.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/apache2-utils-2.2.8-28.8.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/apache2-worker-2.2.8-28.8.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/libapr-util1-1.2.12-43.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/libapr-util1-dbd-mysql-1.2.12-43.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/libapr-util1-dbd-pgsql-1.2.12-43.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/libapr-util1-dbd-sqlite3-1.2.12-43.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/libapr-util1-devel-1.2.12-43.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/libapr1-1.2.12-27.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/libapr1-devel-1.2.12-27.2.x86_64.rpm openSUSE 10.3: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/apache2-2.2.4-70.11.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/apache2-devel-2.2.4-70.11.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/apache2-doc-2.2.4-70.11.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/apache2-example-pages-2.2.4-70.11.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/apache2-prefork-2.2.4-70.11.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/apache2-utils-2.2.4-70.11.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/apache2-worker-2.2.4-70.11.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/libapr-util1-1.2.8-68.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/libapr-util1-dbd-mysql-1.2.8-68.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/libapr-util1-dbd-pgsql-1.2.8-68.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/libapr-util1-dbd-sqlite3-1.2.8-68.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/libapr-util1-devel-1.2.8-68.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/libapr1-1.2.9-9.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/libapr1-devel-1.2.9-9.2.x86_64.rpm Sources: openSUSE 11.1: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/src/libapr-util1-1.3.4-13.3.2.src.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/src/libapr1-1.3.3-12.2.1.src.rpm openSUSE 11.0: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/src/libapr-util1-1.2.12-43.4.src.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/src/libapr1-1.2.12-27.2.src.rpm openSUSE 10.3: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/src/apache2-2.2.4-70.11.src.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/src/libapr-util1-1.2.8-68.4.src.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/src/libapr1-1.2.9-9.2.src.rpm Our maintenance customers are notifiedindividually. The packages are offered for installation from the maintenance web: SUSE Linux Enterprise Desktop 10 SP3 SUSE Linux Enterprise Desktop 10 SP2 Open Enterprise Server Novell Linux POS 9 Novell Linux Desktop 9 SUSE SLES 9 SLES 11 SLE 11 SLES 11 DEBUGINFO SUSE Linux Enterprise Server 10 SP3 SLE SDK 10 SP3 SUSE Linux Enterprise 10 SP3 DEBUGINFO SUSE Linux Enterprise Server 10 SP2 SLE SDK 10 SP2 SUSE Linux Enterprise 10 SP2 DEBUGINFO ______________________________________________________________________________ 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security Summary Report. ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify replacing with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team " where is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig to verify the signature of the package, replacing with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from
Get the latest Linux and open source security news straight to your inbox.