--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-117 2004-05-25 ---------------------------------------------------------------------
Product : Fedora Core 1 Name : httpd Version : 2.0.49 Release : 1.1 Summary : Apache HTTP Server Description : Apache is a powerful, full-featured, efficient, and freely-available Web server. Apache is also the most popular Web server on the Internet.
--------------------------------------------------------------------- Update Information:
This update includes the latest stable release of Apache httpd 2.0, including a security fix for a memory leak in mod_ssl which can be triggered remotely (CVE CAN-2004-0113), and a fix for escaping of error log output (CVE CAN-2003-0020).
This update also includes an enhanced version of the mod_cgi module which fixes a long-standing bug in the handling of stderr output during CGI script execution. ---------------------------------------------------------------------
* Fri May 07 2004 Joe Orton jorton@redhat.com 2.0.49-1.1
- fix 2.0.48's httpd loading 2.0.49's mod_expires.so
* Fri May 07 2004 Joe Orton jorton@redhat.com 2.0.49-1.0
- update to 2.0.49 (thanks to Robert Scheck, #118798) - make "noindex" page valid XHTML 1.1 (Pascal Volk, #122020) - restore /etc/httpd/build/libtool symlink (#113720) - mod_cgi: backport fixes for stderr handling (upstream #22030) - mod_dav: misc improvements - add rgetline NUL-termination fixes (Tsurutani Naoki, upstream #28376)
--------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
b008b66b5af9ce253a53a805919a6814 SRPMS/httpd-2.0.49-1.1.src.rpm f047f09af00b168af1b67ce4ff377c39 i386/httpd-2.0.49-1.1.i386.rpm 52befed28d29860131a578615c2a4ff1 i386/httpd-devel-2.0.49-1.1.i386.rpm 2915df9769773493e82472ce5dfe84dc i386/httpd-manual-2.0.49-1.1.i386.rpm d943e6a34e9dbf1df956f9b98faf9e36 i386/mod_ssl-2.0.49-1.1.i386.rpm 7a59a2e8e05ae55d188c6eeaa2b57e3d i386/debug/httpd-debuginfo-2.0.49-1.1.i386.rpm 89d28478a3a3fa06872aa5a5c4738d08 x86_64/httpd-2.0.49-1.1.x86_64.rpm 4b08a98a31db3e9b4b7482d63b107e18 x86_64/httpd-devel-2.0.49-1.1.x86_64.rpm d553b52be3170277f528289ea1fc8eef x86_64/httpd-manual-2.0.49-1.1.x86_64.rpm b0a67133622538b4d3137114dba3ad04 x86_64/mod_ssl-2.0.49-1.1.x86_64.rpm 479c2ccc1fada2efde2ba409c9058d75 x86_64/debug/httpd-debuginfo-2.0.49-1.1.x86_64.rpm
This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------
announce@lists.stg.fedoraproject.org