sdkp1-apache2

Security update for apache2

Security update for apache2

Several bugs were fixed in the Apache2 webserver: These include the following security issues: - CVE-2006-5752: mod_status: Fix a possible XSS attack against a site with a public server-status page and ExtendedStatus enabled, for browsers which perform charset "detection". - CVE-2007-1863: mod_cache: Prevent a segmentation fault if attributes are listed in a Cache-Control header without any value. - CVE-2007-3304: prefork, worker, event MPMs: Ensure that the parent process cannot be forced to kill processes outside its process group. - CVE-2007-3847: mod_proxy: Prevent reading past the end of a buffer when parsing date-related headers. PR 41144. - CVE-2007-4465: mod_autoindex: Add in ContentType and Charset options to IndexOptions directive. This allows the admin to explicitly set the content-type and charset of the generated page. and the following non-security issues: - get_module_list: replace loadmodule.conf atomically - Use File::Temp to create good tmpdir in logresolve.pl2 (httpd-2.x.x-logresolve.patchs) Several bugs were fixed in the Apache2 webserver: These include the following security issues: - CVE-2006-5752: mod_status: Fix a possible XSS attack against a site with a public server-status page and ExtendedStatus enabled, for browsers which perform charset "detection". - CVE-2007-1863: mod_cache: Prevent a segmentation fault if attributes are listed in a Cache-Control header without any value. - CVE-2007-3304: prefork, worker, event MPMs: Ensure that the parent process cannot be forced to kill processes outside its process group. - CVE-2007-3847: mod_proxy: Prevent reading past the end of a buffer when parsing date-related headers. PR 41144. - CVE-2007-4465: mod_autoindex: Add in ContentType and Charset options to IndexOptions directive. This allows the admin to explicitly set the content-type and charset of the generated page. and the following non-security issues: - get_module_list: replace loadmodule.conf atomically - Use File::Temp to create good tmpdir in logresolve.pl2 (httpd-2.x.x-logresolve.patchs) security apache2 x86_64 b9efce2676e2639b8dc82cc799f78790d5806105 apache2-devel x86_64 17b0218597671a9e766f4051a8ec4ea18629a40d apache2-doc x86_64 67d52fe1ce8c7913bf5b8a06e3e1c43126b49ce4 apache2-example-pages x86_64 734953e6fec698957b47198d1e3e7c1d316f5fac apache2-prefork x86_64 23a87b656e8928e2b1033dc03cea5088afc6a588 apache2-worker x86_64 f97eccf9cadcaa54da50f74fcd8af3fbca7ae5fd