<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="37e6149ffa4539f63a70576decf83a8b"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="sdkp1-apache2-4669"
    timestamp="1194633916"
    engine="1.0">
  <yum:name>sdkp1-apache2</yum:name>
  <summary lang="en">Security update for apache2</summary>
  <summary lang="de">Security update for apache2</summary>
  <description lang="en">Several bugs were fixed in the Apache2 webserver:

These include the following security issues:

- CVE-2006-5752: mod_status: Fix a possible XSS attack
  against a site with a public server-status page and
  ExtendedStatus enabled, for browsers which perform
  charset &quot;detection&quot;.
- CVE-2007-1863: mod_cache: Prevent a segmentation fault if
  attributes are listed in a Cache-Control header without
  any value.
- CVE-2007-3304: prefork, worker, event MPMs: Ensure that
  the parent process cannot be forced to kill processes
  outside its process group.
- CVE-2007-3847: mod_proxy: Prevent reading past the end of
  a buffer when parsing date-related headers. PR 41144.
- CVE-2007-4465: mod_autoindex: Add in ContentType and
  Charset options to IndexOptions directive. This allows
  the admin to explicitly set the content-type and charset
  of the generated page.

and the following non-security issues:

- get_module_list: replace loadmodule.conf atomically
- Use File::Temp to create good tmpdir in logresolve.pl2
  (httpd-2.x.x-logresolve.patchs)
</description>
  <description lang="de">Several bugs were fixed in the Apache2 webserver:

These include the following security issues:

- CVE-2006-5752: mod_status: Fix a possible XSS attack
  against a site with a public server-status page and
  ExtendedStatus enabled, for browsers which perform
  charset &quot;detection&quot;.
- CVE-2007-1863: mod_cache: Prevent a segmentation fault if
  attributes are listed in a Cache-Control header without
  any value.
- CVE-2007-3304: prefork, worker, event MPMs: Ensure that
  the parent process cannot be forced to kill processes
  outside its process group.
- CVE-2007-3847: mod_proxy: Prevent reading past the end of
  a buffer when parsing date-related headers. PR 41144.
- CVE-2007-4465: mod_autoindex: Add in ContentType and
  Charset options to IndexOptions directive. This allows
  the admin to explicitly set the content-type and charset
  of the generated page.

and the following non-security issues:

- get_module_list: replace loadmodule.conf atomically
- Use File::Temp to create good tmpdir in logresolve.pl2
  (httpd-2.x.x-logresolve.patchs)
</description>
  <yum:version ver="4669" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="apache2" epoch="0" ver="2.2.3" rel="16.15" flags="EQ"/>
    <rpm:entry kind="atom" name="apache2-devel" epoch="0" ver="2.2.3" rel="16.15" flags="EQ"/>
    <rpm:entry kind="atom" name="apache2-doc" epoch="0" ver="2.2.3" rel="16.15" flags="EQ"/>
    <rpm:entry kind="atom" name="apache2-example-pages" epoch="0" ver="2.2.3" rel="16.15" flags="EQ"/>
    <rpm:entry kind="atom" name="apache2-prefork" epoch="0" ver="2.2.3" rel="16.15" flags="EQ"/>
    <rpm:entry kind="atom" name="apache2-worker" epoch="0" ver="2.2.3" rel="16.15" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>apache2</name>
      <arch>i586</arch>
      <version epoch="0" ver="2.2.3" rel="16.15"/>
      <checksum type="sha" pkgid="YES">29d3cc21bfcb34e3fabab66452b1234075e63427</checksum>
      <time file="1194795223" build="1194633916"/>
      <size package="1007540" installed="2706880" archive="2776872"/>
      <location xml:base="media://#1" href="suse/i586/apache2-2.2.3-16.17.3.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="apache2" epoch="0" ver="2.2.3" rel="16.15" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="apache2"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>apache2-devel</name>
      <arch>i586</arch>
      <version epoch="0" ver="2.2.3" rel="16.15"/>
      <checksum type="sha" pkgid="YES">0bcb356ec9e69f4a5176f3c1d175a921c2fa9229</checksum>
      <time file="1194795223" build="1194633916"/>
      <size package="211605" installed="628282" archive="662072"/>
      <location xml:base="media://#1" href="suse/i586/apache2-devel-2.2.3-16.17.3.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="apache2-devel" epoch="0" ver="2.2.3" rel="16.15" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="apache2-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>apache2-doc</name>
      <arch>i586</arch>
      <version epoch="0" ver="2.2.3" rel="16.15"/>
      <checksum type="sha" pkgid="YES">2ee09d1bfb8f15c81a786369d09f8c89b169fbd5</checksum>
      <time file="1194795223" build="1194633916"/>
      <size package="1458933" installed="8757342" archive="8877632"/>
      <location xml:base="media://#1" href="suse/i586/apache2-doc-2.2.3-16.17.3.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="apache2-doc" epoch="0" ver="2.2.3" rel="16.15" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="apache2-doc"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>apache2-example-pages</name>
      <arch>i586</arch>
      <version epoch="0" ver="2.2.3" rel="16.15"/>
      <checksum type="sha" pkgid="YES">bc44333c07854e9f566b319794071fcb1d5b7c9e</checksum>
      <time file="1194795224" build="1194633916"/>
      <size package="94540" installed="10200" archive="11484"/>
      <location xml:base="media://#1" href="suse/i586/apache2-example-pages-2.2.3-16.17.3.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="apache2-example-pages" epoch="0" ver="2.2.3" rel="16.15" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="apache2-example-pages"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>apache2-prefork</name>
      <arch>i586</arch>
      <version epoch="0" ver="2.2.3" rel="16.15"/>
      <checksum type="sha" pkgid="YES">849b99ca6151fbaba3c817e07c268e59114c5988</checksum>
      <time file="1194795224" build="1194633916"/>
      <size package="295629" installed="527168" archive="541008"/>
      <location xml:base="media://#1" href="suse/i586/apache2-prefork-2.2.3-16.17.3.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="apache2-prefork" epoch="0" ver="2.2.3" rel="16.15" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="apache2-prefork"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>apache2-worker</name>
      <arch>i586</arch>
      <version epoch="0" ver="2.2.3" rel="16.15"/>
      <checksum type="sha" pkgid="YES">cb1a27325ac81e3380128fc3058fd4e29903c259</checksum>
      <time file="1194795224" build="1194633916"/>
      <size package="301429" installed="543748" archive="557512"/>
      <location xml:base="media://#1" href="suse/i586/apache2-worker-2.2.3-16.17.3.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="apache2-worker" epoch="0" ver="2.2.3" rel="16.15" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="apache2-worker"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
  </atoms>
</patch>
