The Apache Software Foundation and The Apache Server Project
released
a new version of the Apache webserver which addresses the
following security vulnerabilities:
Denial of service
(VU #379828)
Ryan O'Neill reported that it is possible to make the httpd server
enter infinite loops and crash under certain circumstances. A new
configuration directive has been created (LimitInternalRecursion) to
avoid these infinite loops and abort the request which caused them if
the configured limit has been reached.
File descriptor leak
Leaks of several file descriptors to child processes, such as CGI
scripts, were fixed.
