Issued:

2012-11-12

Updated:

2012-11-12

RHBA-2012:1448 - httpd bug fix update

Synopsis

httpd bug fix update

Type/Severity

Bug Fix Advisory

Topic

Updated httpd packages that fix two bugs are now available for Red Hat Enterprise Linux 5.

Description

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

This update fixes the following bugs:

• Due to a bug in the "mod_mem_cache" module, an aborted HTTP connection could result in a cached entity becoming corrupt. With this update, the "mod_mem_cache" module has been fixed to correctly handle aborted connections, avoiding cache corruption in this scenario. (BZ#873677)

• Due to a bug in the "mod_cache" module, the "304 Not Modified" response from an origin server was not properly handled when a cached entity was being refreshed. Consequently, the entity could be returned to the HTTP client with incorrect headers. With this update, the "mod_cache" module has been modified to correctly handle headers in the "304 Not Modified" response. The cached entity is now returned with correct headers in this scenario. (BZ#873730)

All users of httpd are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258

Affected Products

Updated Packages

• httpd-2.2.3-65.el5_8.3.s390x.rpm
• httpd-2.2.3-65.el5_8.3.ia64.rpm
• httpd-debuginfo-2.2.3-65.el5_8.3.s390x.rpm
• httpd-devel-2.2.3-65.el5_8.3.ppc.rpm
• httpd-debuginfo-2.2.3-65.el5_8.3.i386.rpm
• mod_ssl-2.2.3-65.el5_8.3.i386.rpm
• httpd-manual-2.2.3-65.el5_8.3.ia64.rpm
• httpd-debuginfo-2.2.3-65.el5_8.3.ia64.rpm
• httpd-manual-2.2.3-65.el5_8.3.i386.rpm
• httpd-devel-2.2.3-65.el5_8.3.ppc64.rpm
• httpd-manual-2.2.3-65.el5_8.3.ppc.rpm
• httpd-debuginfo-2.2.3-65.el5_8.3.ppc.rpm
• mod_ssl-2.2.3-65.el5_8.3.x86_64.rpm
• mod_ssl-2.2.3-65.el5_8.3.ia64.rpm
• httpd-2.2.3-65.el5_8.3.ppc.rpm
• httpd-manual-2.2.3-65.el5_8.3.s390x.rpm
• httpd-devel-2.2.3-65.el5_8.3.x86_64.rpm
• httpd-2.2.3-65.el5_8.3.i386.rpm
• httpd-devel-2.2.3-65.el5_8.3.ia64.rpm
• httpd-devel-2.2.3-65.el5_8.3.i386.rpm
• httpd-2.2.3-65.el5_8.3.x86_64.rpm
• httpd-debuginfo-2.2.3-65.el5_8.3.x86_64.rpm
• httpd-manual-2.2.3-65.el5_8.3.x86_64.rpm
• httpd-devel-2.2.3-65.el5_8.3.s390x.rpm
• httpd-devel-2.2.3-65.el5_8.3.s390.rpm
• httpd-debuginfo-2.2.3-65.el5_8.3.s390.rpm
• httpd-2.2.3-65.el5_8.3.src.rpm
• httpd-debuginfo-2.2.3-65.el5_8.3.ppc64.rpm
• mod_ssl-2.2.3-65.el5_8.3.ppc.rpm
• mod_ssl-2.2.3-65.el5_8.3.s390x.rpm

Fixes

• This content is not included.BZ - 873730

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.