[SECURITY] Fedora Core 4 Test Update: httpd-2.0.54-10.2

[Joseph Orton]

---------------------------------------------------------------------
Fedora Test Update Notification
FEDORA-2005-849
2005-09-06
---------------------------------------------------------------------

Product     : Fedora Core 4
Name        : httpd
Version     : 2.0.54                      
Release     : 10.2                  
Summary     : Apache HTTP Server
Description :
The Apache HTTP Server is a powerful, full-featured, efficient, and
freely-available Web server. The Apache HTTP Server is also the
most popular Web server on the Internet.

---------------------------------------------------------------------
Update Information:

This update includes two security fixes. An issue was
discovered in mod_ssl where "SSLVerifyClient require" would
not be honoured in location context if the virtual host had
"SSLVerifyClient optional" configured (CAN-2005-2700). An
issue was discovered in memory consumption of the byterange
filter for dynamic resources such as PHP or CGI script
(CAN-2005-2728).
---------------------------------------------------------------------
* Fri Sep  2 2005 Joe Orton <jorton at redhat.com> 2.0.54-10.2
- mod_ssl: add security fix for SSLVerifyClient (#167196, CVE CAN-2005-2700)
- add security fix for byterange filter DoS (#167104, CVE CAN-2005-2728)
- add fix for dummy connection handling (#167425)
- mod_ldap/mod_auth_ldap: add fixes from 2.0.x branch (upstream #34209 etc)
- mod_ssl: add fix for handling non-blocking reads


---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/4/

88c9dc7a948a62cea2ffb13277910a01  SRPMS/httpd-2.0.54-10.2.src.rpm
478988ab42a03029c8699c291fa1009d  ppc/httpd-2.0.54-10.2.ppc.rpm
306609575dd281ae33dd27da4691a08b  ppc/httpd-devel-2.0.54-10.2.ppc.rpm
c742ad0767f3364b4e396ceed05a7b19  ppc/httpd-manual-2.0.54-10.2.ppc.rpm
c1d1e573fa195b0c2eda8101839b6182  ppc/mod_ssl-2.0.54-10.2.ppc.rpm
6bd85e61482f620a29f3667594486047  ppc/debug/httpd-debuginfo-2.0.54-10.2.ppc.rpm
d3f930f3c97aa01bd770f8720b3b178b  x86_64/httpd-2.0.54-10.2.x86_64.rpm
703c9f70e8f3613f7bc1c0c6ce082c82  x86_64/httpd-devel-2.0.54-10.2.x86_64.rpm
09cee26eb56dda9027c6e55fac27db4b  x86_64/httpd-manual-2.0.54-10.2.x86_64.rpm
30f6ab1c98f37834d4c4013884edc1e7  x86_64/mod_ssl-2.0.54-10.2.x86_64.rpm
d0feb8092ec5074e607536d892598d49  x86_64/debug/httpd-debuginfo-2.0.54-10.2.x86_64.rpm
25ec9c57a593ca361c7242d95b69b951  i386/httpd-2.0.54-10.2.i386.rpm
523575a926b3d6d94b62f82529c1a711  i386/httpd-devel-2.0.54-10.2.i386.rpm
c9a91011459628b797bcad0baff99bf1  i386/httpd-manual-2.0.54-10.2.i386.rpm
829ca7551f4395544a98a486387cf594  i386/mod_ssl-2.0.54-10.2.i386.rpm
5da6482d85a80644b94434080cc9d22c  i386/debug/httpd-debuginfo-2.0.54-10.2.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  You may 
need to edit your up2date channels configuration.  Within 
/etc/sysconfig/rhn/sources enable the following line: 
yum updates-testing http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/4/$ARCH
---------------------------------------------------------------------