Fedora alert FEDORA-2008-6314 (httpd)
| From: | updates@fedoraproject.org | |
| To: | fedora-package-announce@redhat.com | |
| Subject: | [SECURITY] Fedora 8 Update: httpd-2.2.9-1.fc8 | |
| Date: | Thu, 07 Aug 2008 23:57:20 +0000 | |
| Message-ID: | <20080807235720.97B471AD126@bastion.fedora.phx.redhat.com> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-6314 2008-08-07 21:20:50 -------------------------------------------------------------------------------- Name : httpd Product : Fedora 8 Version : 2.2.9 Release : 1.fc8 URL : http://httpd.apache.org/ Summary : Apache HTTP Server Description : The Apache HTTP Server is a powerful, efficient, and extensible web server. -------------------------------------------------------------------------------- Update Information: This update includes the latest release of httpd 2.2. A security issue is fixed in this update: A flaw was found in the handling of excessive interim responses from an origin server when using mod_proxy_http. In a forward proxy configuration, if a user of the proxy could be tricked into visiting a malicious web server, the proxy could be forced into consuming a large amount of stack or heap memory. This could lead to an eventual process crash due to stack space exhaustion. -------------------------------------------------------------------------------- ChangeLog: * Mon Jul 14 2008 Joe Orton <jorton@redhat.com> 2.2.9-1.fc8 - update to 2.2.9 (#454100) * Mon Jan 28 2008 Joe Orton <jorton@redhat.com> 2.2.8-1.fc8 - update to 2.2.8 (#430465) -------------------------------------------------------------------------------- References: [ 1 ] Bug #451615 - CVE-2008-2364 httpd: mod_proxy_http DoS via excessive interim responses from the origin server https://bugzilla.redhat.com/show_bug.cgi?id=451615 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update httpd' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann...