[SECURITY] Fedora Core 2 Update: httpd-2.0.51-2.7

[Joe Orton]

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-313
2004-09-23
---------------------------------------------------------------------

Product     : Fedora Core 2
Name        : httpd
Version     : 2.0.51                      
Release     : 2.7                  
Summary     : Apache HTTP Server
Description :
Apache is a powerful, full-featured, efficient, and freely-available
Web server. Apache is also the most popular Web server on the
Internet.

---------------------------------------------------------------------

This update includes the latest stable release of Apache httpd 2.0,
including fixes for possible denial of service issues in mod_ssl
(CAN-2004-0751, CAN-2004-0747) and mod_dav_fs (CAN-2004-0809), and a
privilege elevation attack for local users (CAN-2004-0747).

Note that these packages do also contain the fix for a regression in
Satisfy handling in the 2.0.51 release (CAN-2004-0811).

---------------------------------------------------------------------

* Tue Sep 21 2004 Joe Orton <jorton(a)redhat.com&gt; 2.0.51-2.7

- ap_rgetline_core fix from Rici Lake

* Tue Sep 21 2004 Joe Orton <jorton(a)redhat.com&gt; 2.0.51-2.6

- fix 2.0.51 regression in Satisfy merging (CAN-2004-0811)

* Thu Sep 16 2004 Joe Orton <jorton(a)redhat.com&gt; 2.0.51-2.5

- mod_ssl: prevent SIGHUP-triggers-SIGSEGV after upgrade from 2.0.50
- revert mod_ldap/mod_auth_ldap changes likewise

* Wed Sep 15 2004 Joe Orton <jorton(a)redhat.com&gt; 2.0.51-2.1

- update to 2.0.51, including security fixes for:
 * core: CAN-2004-0747
 * mod_dav_fs: CAN-2004-0809
 * mod_ssl: CAN-2004-0751, CAN-2004-0748

---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

99c4698c12b5ce206fe1d421a0d24626  SRPMS/httpd-2.0.51-2.7.src.rpm
e015611ce4a96ef0488eb772d4e20e95  x86_64/httpd-2.0.51-2.7.x86_64.rpm
9d4c7c3db22fe5b8b5db8f0e6229c9c1  x86_64/httpd-devel-2.0.51-2.7.x86_64.rpm
0d5eaca4b6a0ca22dfb164438f0df73d  x86_64/httpd-manual-2.0.51-2.7.x86_64.rpm
6ae2964daebddd4630a143712583929b  x86_64/mod_ssl-2.0.51-2.7.x86_64.rpm
a87b486fe234e674ec7a7040da825874  x86_64/debug/httpd-debuginfo-2.0.51-2.7.x86_64.rpm
6ce668b14a339a895c1f94d3d2c74344  i386/httpd-2.0.51-2.7.i386.rpm
bf2d5ce617b715efb85a6bef1dcc1ff6  i386/httpd-devel-2.0.51-2.7.i386.rpm
7fdc3fd7ffd27e10ed608bad819f8203  i386/httpd-manual-2.0.51-2.7.i386.rpm
df387ada50ec5a154d840ae8d3996157  i386/mod_ssl-2.0.51-2.7.i386.rpm
feb541c52c040b0e12c879a3f264f5b7  i386/debug/httpd-debuginfo-2.0.51-2.7.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
---------------------------------------------------------------------