---------------------------------------------------------------------Fedora Update Notification
FEDORA-2005-638
2005-08-02
---------------------------------------------------------------------Product     : Fedora Core 3
Name        : httpd
Version     : 2.0.53                      
Release     : 3.2                  
Summary     : Apache HTTP Server
Description :
Apache is a powerful, full-featured, efficient, and freely-available
Web server. Apache is also the most popular Web server on the
Internet.

---------------------------------------------------------------------Update Information:

This update includes version 2.0.53 of the Apache HTTP
server, and also adds security fixes for CVE CAN-2005-2088
and CVE CAN-2005-1268.
---------------------------------------------------------------------* Tue Jul 26 2005 Joe Orton  2.0.53-3.2
- add security fix for C-L vs T-E handling (#162245, CVE CAN-2005-2088)
- mod_ssl: add security fix for CRL overflow (CVE CAN-2005-1268)
- mod_ssl: fix to enable output buffering (upstream #35279)
- mod_ssl: fix for picking up -shutdown options (upstream #34452)
- mod_include: fix variable corruption in nested includes (upstream #12655)
- mod_auth_digest: fix hostinfo comparison in CONNECT requests
- add piped logger fixes (w/Jeff Trawick)
- mod_userdir: fix memory allocation issue (upstream #34588)

* Mon Mar 21 2005 Joe Orton  2.0.53-3.1
- update to 2.0.53
- apachectl: use runuser so "apachectl testconfig" produces output
- apachectl: restore use of $OPTIONS again (#115910)
- mod_ssl: set user from SSLUserName in access hook (upstream #31418)
- htdigest: fix permissions of created files (upstream #33765)
- httpd.init: refuse to restart if config syntax test fails


---------------------------------------------------------------------This update can be downloaded from:
  
ebb1ad874f28ba67a5836ff3618de90d  SRPMS/httpd-2.0.53-3.2.src.rpm
dd1929bd75029939f7f22da4eb090061  x86_64/httpd-2.0.53-3.2.x86_64.rpm
30bb95c39ec0aee58daa16ddf650d1c4  x86_64/httpd-devel-2.0.53-3.2.x86_64.rpm
485ad48e6b29bc4994df3e45b6b24418  x86_64/httpd-manual-2.0.53-3.2.x86_64.rpm
de1462c24a3833a58527c479c5a48b3e  x86_64/mod_ssl-2.0.53-3.2.x86_64.rpm
9c3c18b386cac3b7c6bfc09690590f49  x86_64/httpd-suexec-2.0.53-3.2.x86_64.rpm
402906de4433e1d93c294ccfec8d607e  x86_64/debug/httpd-debuginfo-2.0.53-3.2.x86_64.rpm
e665c28d559c855a26807eceabc0d2c8  i386/httpd-2.0.53-3.2.i386.rpm
31eaee49409f48d47a2416532f1c6b55  i386/httpd-devel-2.0.53-3.2.i386.rpm
62bce7ff6a437e447d84e77c9e1c6127  i386/httpd-manual-2.0.53-3.2.i386.rpm
4c46b1d02b1f05d1799aa2b9b30156ca  i386/mod_ssl-2.0.53-3.2.i386.rpm
7d91cb20ff7f748169f1c0bad5b56440  i386/httpd-suexec-2.0.53-3.2.i386.rpm
90152490a7c19bdfaf4f3030b141f414  i386/debug/httpd-debuginfo-2.0.53-3.2.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
-----------------------------------------------------------------------fedora-announce-list mailing list
fedora-announce-list@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-announce-list

Fedora Core 3 Update: httpd-2.0.53-3.2

August 2, 2005
This update includes version 2.0.53 of the Apache HTTP server, and also adds security fixes for CVE CAN-2005-2088 and CVE CAN-2005-1268.

Summary

Apache is a powerful, full-featured, efficient, and freely-available

Web server. Apache is also the most popular Web server on the

Internet.

This update includes version 2.0.53 of the Apache HTTP

server, and also adds security fixes for CVE CAN-2005-2088

and CVE CAN-2005-1268.

- add security fix for C-L vs T-E handling (#162245, CVE CAN-2005-2088)

- mod_ssl: add security fix for CRL overflow (CVE CAN-2005-1268)

- mod_ssl: fix to enable output buffering (upstream #35279)

- mod_ssl: fix for picking up -shutdown options (upstream #34452)

- mod_include: fix variable corruption in nested includes (upstream #12655)

- mod_auth_digest: fix hostinfo comparison in CONNECT requests

- add piped logger fixes (w/Jeff Trawick)

- mod_userdir: fix memory allocation issue (upstream #34588)

* Mon Mar 21 2005 Joe Orton 2.0.53-3.1

- update to 2.0.53

- apachectl: use runuser so "apachectl testconfig" produces output

- apachectl: restore use of $OPTIONS again (#115910)

- mod_ssl: set user from SSLUserName in access hook (upstream #31418)

- htdigest: fix permissions of created files (upstream #33765)

- httpd.init: refuse to restart if config syntax test fails

ebb1ad874f28ba67a5836ff3618de90d SRPMS/httpd-2.0.53-3.2.src.rpm

dd1929bd75029939f7f22da4eb090061 x86_64/httpd-2.0.53-3.2.x86_64.rpm

30bb95c39ec0aee58daa16ddf650d1c4 x86_64/httpd-devel-2.0.53-3.2.x86_64.rpm

485ad48e6b29bc4994df3e45b6b24418 x86_64/httpd-manual-2.0.53-3.2.x86_64.rpm

de1462c24a3833a58527c479c5a48b3e x86_64/mod_ssl-2.0.53-3.2.x86_64.rpm

9c3c18b386cac3b7c6bfc09690590f49 x86_64/httpd-suexec-2.0.53-3.2.x86_64.rpm

402906de4433e1d93c294ccfec8d607e x86_64/debug/httpd-debuginfo-2.0.53-3.2.x86_64.rpm

e665c28d559c855a26807eceabc0d2c8 i386/httpd-2.0.53-3.2.i386.rpm

31eaee49409f48d47a2416532f1c6b55 i386/httpd-devel-2.0.53-3.2.i386.rpm

62bce7ff6a437e447d84e77c9e1c6127 i386/httpd-manual-2.0.53-3.2.i386.rpm

4c46b1d02b1f05d1799aa2b9b30156ca i386/mod_ssl-2.0.53-3.2.i386.rpm

7d91cb20ff7f748169f1c0bad5b56440 i386/httpd-suexec-2.0.53-3.2.i386.rpm

90152490a7c19bdfaf4f3030b141f414 i386/debug/httpd-debuginfo-2.0.53-3.2.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com

http://www.redhat.com/mailman/listinfo/fedora-announce-list

FEDORA-2005-638 2005-08-02 Name : httpd Version : 2.0.53 Release : 3.2 Summary : Apache HTTP Server Description : Apache is a powerful, full-featured, efficient, and freely-available Web server. Apache is also the most popular Web server on the Internet. This update includes version 2.0.53 of the Apache HTTP server, and also adds security fixes for CVE CAN-2005-2088 and CVE CAN-2005-1268. - add security fix for C-L vs T-E handling (#162245, CVE CAN-2005-2088) - mod_ssl: add security fix for CRL overflow (CVE CAN-2005-1268) - mod_ssl: fix to enable output buffering (upstream #35279) - mod_ssl: fix for picking up -shutdown options (upstream #34452) - mod_include: fix variable corruption in nested includes (upstream #12655) - mod_auth_digest: fix hostinfo comparison in CONNECT requests - add piped logger fixes (w/Jeff Trawick) - mod_userdir: fix memory allocation issue (upstream #34588) * Mon Mar 21 2005 Joe Orton 2.0.53-3.1 - update to 2.0.53 - apachectl: use runuser so "apachectl testconfig" produces output - apachectl: restore use of $OPTIONS again (#115910) - mod_ssl: set user from SSLUserName in access hook (upstream #31418) - htdigest: fix permissions of created files (upstream #33765) - httpd.init: refuse to restart if config syntax test fails ebb1ad874f28ba67a5836ff3618de90d SRPMS/httpd-2.0.53-3.2.src.rpm dd1929bd75029939f7f22da4eb090061 x86_64/httpd-2.0.53-3.2.x86_64.rpm 30bb95c39ec0aee58daa16ddf650d1c4 x86_64/httpd-devel-2.0.53-3.2.x86_64.rpm 485ad48e6b29bc4994df3e45b6b24418 x86_64/httpd-manual-2.0.53-3.2.x86_64.rpm de1462c24a3833a58527c479c5a48b3e x86_64/mod_ssl-2.0.53-3.2.x86_64.rpm 9c3c18b386cac3b7c6bfc09690590f49 x86_64/httpd-suexec-2.0.53-3.2.x86_64.rpm 402906de4433e1d93c294ccfec8d607e x86_64/debug/httpd-debuginfo-2.0.53-3.2.x86_64.rpm e665c28d559c855a26807eceabc0d2c8 i386/httpd-2.0.53-3.2.i386.rpm 31eaee49409f48d47a2416532f1c6b55 i386/httpd-devel-2.0.53-3.2.i386.rpm 62bce7ff6a437e447d84e77c9e1c6127 i386/httpd-manual-2.0.53-3.2.i386.rpm 4c46b1d02b1f05d1799aa2b9b30156ca i386/mod_ssl-2.0.53-3.2.i386.rpm 7d91cb20ff7f748169f1c0bad5b56440 i386/httpd-suexec-2.0.53-3.2.i386.rpm 90152490a7c19bdfaf4f3030b141f414 i386/debug/httpd-debuginfo-2.0.53-3.2.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. fedora-announce-list@redhat.com http://www.redhat.com/mailman/listinfo/fedora-announce-list

Change Log

References

Update Instructions

Severity
Name : httpd
Version : 2.0.53
Release : 3.2
Summary : Apache HTTP Server

Related News

24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
30.Lock Globe Motherboard Esm H320
1 - 2 min read
The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security
11.Locks IsometricPattern Esm H320
2 - 3 min read
Open Source maintainers and developers have been warned about the continued wave of attacks aimed at project maintainers similar to those recently
28.Lock Globe Esm H320
1 - 2 min read
A resurgence of cyberattacks targeting Linux systems in Asian campaigns through the utilization of the Pupy Remote Access Trojan (RAT) has been
27.Tablet Connections Blocks Lock Esm H320
2 - 4 min read
Canonical has recently announced the Beta release of Ubuntu Linux 24.04 LTS , codenamed "Noble Numbat." This release aims to continue Ubuntu's
21.Globe RadiatingCode Esm H320
2 - 3 min read
The open-source movement has come a long way, from its origins in the 1960s and 1970s to becoming an integral part of organizations worldwide.
13.Lock StylizedMotherboard Esm H320
2 - 3 min read
The Rust-based Edera project demonstrates a unique approach to container security that addresses cloud-native computing challenges. Let's examine
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved