Re: RHSA-2003:244 ?

[Joe Orton <jorton redhat com>]

Hi Andrius,

On Fri, Sep 26, 2003 at 12:28:18PM +0300, Andrius Zacharovas wrote:
> is Stronghold 4 vulnerable relating RHSA-2003:244 ?
> Because I see updates on various RH products with Apache.

There are two issues covered by that advisory, with CVE names
CAN-2003-0192, and CAN-2003-0020.

CAN-2003-0020 was fixed in this Stronghold 4 update:
  http://rhn.redhat.com/errata/RHSA-2003-082.html

CAN-2003-0192 was fixed in the new update issued this week:
  http://rhn.redhat.com/errata/RHSA-2003-290.html

Regards,
Joe
-- 
Joe Orton, Red Hat Europe, Stronghold Engineering
http://stronghold.redhat.com/