---------------------------------------------------------------------Fedora Update Notification
FEDORA-2005-638
2005-08-02
---------------------------------------------------------------------Product     : Fedora Core 3
Name        : httpd
Version     : 2.0.53                      
Release     : 3.2                  
Summary     : Apache HTTP Server
Description :
Apache is a powerful, full-featured, efficient, and freely-available
Web server. Apache is also the most popular Web server on the
Internet.

---------------------------------------------------------------------Update Information:

This update includes version 2.0.53 of the Apache HTTP
server, and also adds security fixes for CVE CAN-2005-2088
and CVE CAN-2005-1268.
---------------------------------------------------------------------* Tue Jul 26 2005 Joe Orton  2.0.53-3.2
- add security fix for C-L vs T-E handling (#162245, CVE CAN-2005-2088)
- mod_ssl: add security fix for CRL overflow (CVE CAN-2005-1268)
- mod_ssl: fix to enable output buffering (upstream #35279)
- mod_ssl: fix for picking up -shutdown options (upstream #34452)
- mod_include: fix variable corruption in nested includes (upstream #12655)
- mod_auth_digest: fix hostinfo comparison in CONNECT requests
- add piped logger fixes (w/Jeff Trawick)
- mod_userdir: fix memory allocation issue (upstream #34588)

* Mon Mar 21 2005 Joe Orton  2.0.53-3.1
- update to 2.0.53
- apachectl: use runuser so "apachectl testconfig" produces output
- apachectl: restore use of $OPTIONS again (#115910)
- mod_ssl: set user from SSLUserName in access hook (upstream #31418)
- htdigest: fix permissions of created files (upstream #33765)
- httpd.init: refuse to restart if config syntax test fails


---------------------------------------------------------------------This update can be downloaded from:
  
ebb1ad874f28ba67a5836ff3618de90d  SRPMS/httpd-2.0.53-3.2.src.rpm
dd1929bd75029939f7f22da4eb090061  x86_64/httpd-2.0.53-3.2.x86_64.rpm
30bb95c39ec0aee58daa16ddf650d1c4  x86_64/httpd-devel-2.0.53-3.2.x86_64.rpm
485ad48e6b29bc4994df3e45b6b24418  x86_64/httpd-manual-2.0.53-3.2.x86_64.rpm
de1462c24a3833a58527c479c5a48b3e  x86_64/mod_ssl-2.0.53-3.2.x86_64.rpm
9c3c18b386cac3b7c6bfc09690590f49  x86_64/httpd-suexec-2.0.53-3.2.x86_64.rpm
402906de4433e1d93c294ccfec8d607e  x86_64/debug/httpd-debuginfo-2.0.53-3.2.x86_64.rpm
e665c28d559c855a26807eceabc0d2c8  i386/httpd-2.0.53-3.2.i386.rpm
31eaee49409f48d47a2416532f1c6b55  i386/httpd-devel-2.0.53-3.2.i386.rpm
62bce7ff6a437e447d84e77c9e1c6127  i386/httpd-manual-2.0.53-3.2.i386.rpm
4c46b1d02b1f05d1799aa2b9b30156ca  i386/mod_ssl-2.0.53-3.2.i386.rpm
7d91cb20ff7f748169f1c0bad5b56440  i386/httpd-suexec-2.0.53-3.2.i386.rpm
90152490a7c19bdfaf4f3030b141f414  i386/debug/httpd-debuginfo-2.0.53-3.2.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
-----------------------------------------------------------------------fedora-announce-list mailing list
fedora-announce-list@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-announce-list

Fedora Core 3 Update: httpd-2.0.53-3.2

August 2, 2005
This update includes version 2.0.53 of the Apache HTTP server, and also adds security fixes for CVE CAN-2005-2088 and CVE CAN-2005-1268.

Summary

Apache is a powerful, full-featured, efficient, and freely-available

Web server. Apache is also the most popular Web server on the

Internet.

This update includes version 2.0.53 of the Apache HTTP

server, and also adds security fixes for CVE CAN-2005-2088

and CVE CAN-2005-1268.

- add security fix for C-L vs T-E handling (#162245, CVE CAN-2005-2088)

- mod_ssl: add security fix for CRL overflow (CVE CAN-2005-1268)

- mod_ssl: fix to enable output buffering (upstream #35279)

- mod_ssl: fix for picking up -shutdown options (upstream #34452)

- mod_include: fix variable corruption in nested includes (upstream #12655)

- mod_auth_digest: fix hostinfo comparison in CONNECT requests

- add piped logger fixes (w/Jeff Trawick)

- mod_userdir: fix memory allocation issue (upstream #34588)

* Mon Mar 21 2005 Joe Orton 2.0.53-3.1

- update to 2.0.53

- apachectl: use runuser so "apachectl testconfig" produces output

- apachectl: restore use of $OPTIONS again (#115910)

- mod_ssl: set user from SSLUserName in access hook (upstream #31418)

- htdigest: fix permissions of created files (upstream #33765)

- httpd.init: refuse to restart if config syntax test fails

ebb1ad874f28ba67a5836ff3618de90d SRPMS/httpd-2.0.53-3.2.src.rpm

dd1929bd75029939f7f22da4eb090061 x86_64/httpd-2.0.53-3.2.x86_64.rpm

30bb95c39ec0aee58daa16ddf650d1c4 x86_64/httpd-devel-2.0.53-3.2.x86_64.rpm

485ad48e6b29bc4994df3e45b6b24418 x86_64/httpd-manual-2.0.53-3.2.x86_64.rpm

de1462c24a3833a58527c479c5a48b3e x86_64/mod_ssl-2.0.53-3.2.x86_64.rpm

9c3c18b386cac3b7c6bfc09690590f49 x86_64/httpd-suexec-2.0.53-3.2.x86_64.rpm

402906de4433e1d93c294ccfec8d607e x86_64/debug/httpd-debuginfo-2.0.53-3.2.x86_64.rpm

e665c28d559c855a26807eceabc0d2c8 i386/httpd-2.0.53-3.2.i386.rpm

31eaee49409f48d47a2416532f1c6b55 i386/httpd-devel-2.0.53-3.2.i386.rpm

62bce7ff6a437e447d84e77c9e1c6127 i386/httpd-manual-2.0.53-3.2.i386.rpm

4c46b1d02b1f05d1799aa2b9b30156ca i386/mod_ssl-2.0.53-3.2.i386.rpm

7d91cb20ff7f748169f1c0bad5b56440 i386/httpd-suexec-2.0.53-3.2.i386.rpm

90152490a7c19bdfaf4f3030b141f414 i386/debug/httpd-debuginfo-2.0.53-3.2.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com

http://www.redhat.com/mailman/listinfo/fedora-announce-list

Change Log

References

Update Instructions

Severity
Name : httpd
Version : 2.0.53
Release : 3.2
Summary : Apache HTTP Server

Related News

The End of the Road for Linux 6.11: A Call to Upgrade to Kernel 6.12
3 - 5 min read
The Linux kernel community recently issued an EOL announcement regarding the 6.11 kernel series, urging sysadmins to upgrade quickly to 6.12 . This
A Linux Admin
3 - 6 min read
As 2025 approaches, we Linux admins are facing new and often unseen cloud-native security obstacles. While skilled at mitigating known risks,
Leveraging Insights from the Linux Foundation
3 - 5 min read
The Linux Foundation's recent Census III report provides critical insights for Linux administrators, information security professionals, and anyone
Chrome 131 Released: Emergency Security Update Fixes Over a Dozen Significant Vulns
3 - 6 min read
Google recently unveiled a critical security update to their popular web browser, Google Chrome, addressing over a dozen significant security
From Wayland Fixes to Security Boosts: Examining Qt 6.8.1
3 - 6 min read
The recent Qt 6.8.1 release brings significant updates and improvements, strengthening its reputation as a secure and reliable application
Exploring Arch Linux 2024.12.01: Security Implications & Notable Enhancements for Linux Admins
3 - 6 min read
The Arch Linux 2024.12.01 ISO release marks an impressive milestone, offering cutting-edge updates that enhance functionality, streamline
Deck the Halls with Enhanced Security: Linux Kernel 6.13
3 - 5 min read
As Linux admins and infosec professionals prepare for the holiday season, there's much cause for celebration this year! Linus Torvalds recently made
Lessons from Bootkitty: Securing Linux Systems Against UEFI Intrusions
3 - 5 min read
New Linux security threats mark critical junctures that challenge existing policies and test security protocols to their limit. One such milestone

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved