Attachment 19906 Details for Bug 55611

new patchinfo with mod_ssl fix added

patchinfo.apache (text/plain), 1.04 KB, created by Peter Poeml on 2004-05-19 17:52:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Peter Poeml

Created: 2004-05-19 17:52:30 UTC

Size: 1.04 KB

patch

obsolete

>DISTRIBUTION: 7.2-s390,sles7-i386,sles7-ia64,sles7-ppc,sles7-s390x,sles8-ppc,sles8-s390,sles8-s390x,ul1-i386,ul1-ia64,ul1-x86_64
>PACKAGE: apache
>PACKAGER: poeml@suse.de
>CATEGORY: security
>INDICATIONS: Everyone using apache should update.
>CONTRAINDICATIONS:
>CD-Produkt-Name:
>CD-Produkt-Version:
>REQUIRES:
>DESCRIPTION:
>Security Fix:
>This apache update solves the following security problems:
>        - mod_digest: verify nonce (CAN-2003-0987)
>        - escape suspicious chars before logging them (CAN-2003-0020)
>        - starvation issue on listening sockets (CAN-2004-0174)
>        - mod_alias, mod_rewrite: fix buffer overflow while
>          using regular expresssions (CAN-2003-0542)
>	- on big-endian 64-bit platforms: fix parsing of Allow/Deny rules using
>	  IP addresses without a netmask (CAN-2003-0993)
>        - buffer overflow in mod_ssl (ssl_util_uuencode(), #40791)
>
>To install the update, use the command 
>	rpm -Uhv apache.rpm
>followed by 
>	SuSEconfig --module apache
>To make the update effective, restart the server with the command
>	rcapache restart

Actions: View

Attachments on bug 55611: 19816 | 19817 | 19818 | 19819 | 19822 | 19823 | 19824 | 19825 | 19826 | 19841 | 19844 | 19905 | 19906