ELSA-2007-0747

ELSA-2007-0747 - httpd security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2007-11-27

Description

[2.0.52-38.ent.0.1]
- use oracle index page oracle_index.html
- updated string and distro in specfile

[2.0.52-38.ent]
- fix server version string (#236419)

[2.0.52-37.ent]
- add security fix for CVE-2007-3847 (#250760)

[2.0.52-36.ent]
- add mod_version, load in default httpd.conf (#248696)

[2.0.52-35.ent]
- add 'ServerTokens Full-Release' config option (#236419)
- add security fix for CVE-2007-3304 (#246182)
- add security fixes for CVE-2007-1863 and CVE-2006-5752 (#244664)

[2.0.52-34.ent]
- use init script in logrotate postrotate (#241407)
- mod_proxy: fix handling of percent chars (#233254)
- fix {default,cgi}_handler returning bogus errors (#197915)
- fix unnecessary loss of C-L in HEAD responses (#173467)

[2.0.52-33.ent]
- fix ProxyErrorOverride to only affect 4xx, 5xx responses (#240022)
- fix mod_proxy option inheritance (#242920)

Related CVEs

CVE-2007-3847

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 4 (i386)	httpd-2.0.52-38.ent.0.1.src.rpm	fd2291d3b470fdb88b78c99e87b58650454f856ec78ada9d6ad0e40464810aa9	ELSA-2011-1392	el4_i386_latest
	httpd-2.0.52-38.ent.0.1.src.rpm	fd2291d3b470fdb88b78c99e87b58650454f856ec78ada9d6ad0e40464810aa9	ELSA-2011-1392	el4_u6_i386_base
	httpd-2.0.52-38.ent.0.1.i386.rpm	f2319f019b6e190b4209210023037318a13e11a7d659bc5b0ae353a6c725b361	ELSA-2011-1392	el4_i386_latest
	httpd-2.0.52-38.ent.0.1.i386.rpm	f2319f019b6e190b4209210023037318a13e11a7d659bc5b0ae353a6c725b361	ELSA-2011-1392	el4_u6_i386_base
	httpd-devel-2.0.52-38.ent.0.1.i386.rpm	f477b17c6e9c34878129585c62b36834b058dd26e8f784ea99ab6297db151827	ELSA-2011-1392	el4_i386_latest
	httpd-devel-2.0.52-38.ent.0.1.i386.rpm	f477b17c6e9c34878129585c62b36834b058dd26e8f784ea99ab6297db151827	ELSA-2011-1392	el4_u6_i386_base
	httpd-manual-2.0.52-38.ent.0.1.i386.rpm	f4c13e19df4095e641c1dff7c839c61c3f699cfced0648277716dff83e0033d9	ELSA-2011-1392	el4_i386_latest
	httpd-manual-2.0.52-38.ent.0.1.i386.rpm	f4c13e19df4095e641c1dff7c839c61c3f699cfced0648277716dff83e0033d9	ELSA-2011-1392	el4_u6_i386_base
	httpd-suexec-2.0.52-38.ent.0.1.i386.rpm	956fc6eedcde25e83aed5004c8f32939b0bf4c918d10765c5b5ec9d48f46465f	ELSA-2011-1392	el4_i386_latest
	httpd-suexec-2.0.52-38.ent.0.1.i386.rpm	956fc6eedcde25e83aed5004c8f32939b0bf4c918d10765c5b5ec9d48f46465f	ELSA-2011-1392	el4_u6_i386_base
Oracle Linux 4 (ia64)	httpd-2.0.52-38.ent.0.1.src.rpm	fd2291d3b470fdb88b78c99e87b58650454f856ec78ada9d6ad0e40464810aa9	ELSA-2011-1392	el4_ia64_latest
	httpd-2.0.52-38.ent.0.1.src.rpm	fd2291d3b470fdb88b78c99e87b58650454f856ec78ada9d6ad0e40464810aa9	ELSA-2011-1392	el4_u6_ia64_base
	httpd-2.0.52-38.ent.0.1.ia64.rpm	8a9ff90674c2b238646821eb350bf60dad26af2051e7b9ed9db4413e9d0cd220	ELSA-2011-1392	el4_ia64_latest
	httpd-2.0.52-38.ent.0.1.ia64.rpm	8a9ff90674c2b238646821eb350bf60dad26af2051e7b9ed9db4413e9d0cd220	ELSA-2011-1392	el4_u6_ia64_base
	httpd-devel-2.0.52-38.ent.0.1.ia64.rpm	b8e65ba2d9b8f49d4062ebcd0c3b6881905c071f23c3fb16b70ef3e4fdf0b13e	ELSA-2011-1392	el4_ia64_latest
	httpd-devel-2.0.52-38.ent.0.1.ia64.rpm	b8e65ba2d9b8f49d4062ebcd0c3b6881905c071f23c3fb16b70ef3e4fdf0b13e	ELSA-2011-1392	el4_u6_ia64_base
	httpd-manual-2.0.52-38.ent.0.1.ia64.rpm	1e27048475972fcb054f0208e50f43cd40712645d25ac54a802eae03371ab1f0	ELSA-2011-1392	el4_ia64_latest
	httpd-manual-2.0.52-38.ent.0.1.ia64.rpm	1e27048475972fcb054f0208e50f43cd40712645d25ac54a802eae03371ab1f0	ELSA-2011-1392	el4_u6_ia64_base
	httpd-suexec-2.0.52-38.ent.0.1.ia64.rpm	17d936faa9a9fb96f496bb6f365612814185d3c5a48928722824b94f3ddbb278	ELSA-2011-1392	el4_ia64_latest
	httpd-suexec-2.0.52-38.ent.0.1.ia64.rpm	17d936faa9a9fb96f496bb6f365612814185d3c5a48928722824b94f3ddbb278	ELSA-2011-1392	el4_u6_ia64_base
Oracle Linux 4 (x86_64)	httpd-2.0.52-38.ent.0.1.src.rpm	fd2291d3b470fdb88b78c99e87b58650454f856ec78ada9d6ad0e40464810aa9	ELSA-2011-1392	el4_u6_x86_64_base
	httpd-2.0.52-38.ent.0.1.src.rpm	fd2291d3b470fdb88b78c99e87b58650454f856ec78ada9d6ad0e40464810aa9	ELSA-2011-1392	el4_x86_64_latest
	httpd-2.0.52-38.ent.0.1.x86_64.rpm	6c3c3f4cc6cb2e1f4af1baa005d6276de1842ffa4d165cb2036ff0b9cc1e3589	ELSA-2011-1392	el4_u6_x86_64_base
	httpd-2.0.52-38.ent.0.1.x86_64.rpm	6c3c3f4cc6cb2e1f4af1baa005d6276de1842ffa4d165cb2036ff0b9cc1e3589	ELSA-2011-1392	el4_x86_64_latest
	httpd-devel-2.0.52-38.ent.0.1.x86_64.rpm	ca660aea9dfd7edf4cc6208ee25bfa87aa3f7db7dbbfc8669f04b4558dcdc925	ELSA-2011-1392	el4_u6_x86_64_base
	httpd-devel-2.0.52-38.ent.0.1.x86_64.rpm	ca660aea9dfd7edf4cc6208ee25bfa87aa3f7db7dbbfc8669f04b4558dcdc925	ELSA-2011-1392	el4_x86_64_latest
	httpd-manual-2.0.52-38.ent.0.1.x86_64.rpm	787942670712a78ddea31e387cd6aa7951a904bf8c71316b1d77a35501f19706	ELSA-2011-1392	el4_u6_x86_64_base
	httpd-manual-2.0.52-38.ent.0.1.x86_64.rpm	787942670712a78ddea31e387cd6aa7951a904bf8c71316b1d77a35501f19706	ELSA-2011-1392	el4_x86_64_latest
	httpd-suexec-2.0.52-38.ent.0.1.x86_64.rpm	4dfecd55e361ef7912874b2aa9bfad6db6f1e94d8511ae100078fcb205c04a6b	ELSA-2011-1392	el4_u6_x86_64_base
	httpd-suexec-2.0.52-38.ent.0.1.x86_64.rpm	4dfecd55e361ef7912874b2aa9bfad6db6f1e94d8511ae100078fcb205c04a6b	ELSA-2011-1392	el4_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team