Skip to navigation

Security Advisory Moderate: httpd security, bug fix, and enhancement update

Advisory: RHSA-2007:0746-8
Type: Security Advisory
Severity: Moderate
Issued on: 2007-11-07
Last updated on: 2007-11-07
Affected Products: RHEL Desktop Workstation (v. 5 client)
Red Hat Enterprise Linux (v. 5 server)
Red Hat Enterprise Linux Desktop (v. 5 client)
CVEs (cve.mitre.org): CVE-2007-3847

Details

Updated httpd packages that fix a security issue, fix various bugs, and
add enhancements, are now available for Red Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

The Apache HTTP Server is a popular and freely-available Web server.

A flaw was found in the Apache HTTP Server mod_proxy module. On sites where
a reverse proxy is configured, a remote attacker could send a carefully
crafted request that would cause the Apache child process handling that
request to crash. On sites where a forward proxy is configured, an attacker
could cause a similar crash if a user could be persuaded to visit a
malicious site using the proxy. This could lead to a denial of service if
using a threaded Multi-Processing Module. (CVE-2007-3847)

As well, these updated packages fix the following bugs:

* Set-Cookie headers with a status code of 3xx are not forwarded to
clients when the "ProxyErrorOverride" directive is enabled. These
responses are overridden at the proxy. Only the responses with status
codes of 4xx and 5xx are overridden in these updated packages.

* the default "/etc/logrotate.d/httpd" script incorrectly invoked the kill
command, instead of using the "/sbin/service httpd restart" command. If you
configured the httpd PID to be in a location other than
"/var/run/httpd.pid", the httpd logs failed to be rotated. This has been
resolved in these updated packages.

* the "ProxyTimeout" directive was not inherited across virtual host
definitions.

* the logresolve utility was unable to read lines longer the 1024 bytes.

This update adds the following enhancements:

* a new configuration option has been added, "ServerTokens Full-Release",
which adds the package release to the server version string, which is
returned in the "Server" response header.

* a new module has been added, mod_version, which allows configuration
files to be written containing sections, which are evaluated only if the
version of httpd used matches a specified condition.

Users of httpd are advised to upgrade to these updated packages, which
resolve these issues and add these enhancements.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Updated packages

RHEL Desktop Workstation (v. 5 client)

SRPMS:
httpd-2.2.3-11.el5.src.rpm
File outdated by:  RHSA-2014:0369
    MD5: 3ee6039a6aa2beeb14c55695c48cb6be
 
IA-32:
httpd-devel-2.2.3-11.el5.i386.rpm
File outdated by:  RHSA-2014:0369
    MD5: 2295f9d39e5e87fa8843f5c6158e2afb
httpd-manual-2.2.3-11.el5.i386.rpm
File outdated by:  RHSA-2014:0369
    MD5: c994b3e5b0e2ff8102043792505c91d4
 
x86_64:
httpd-devel-2.2.3-11.el5.i386.rpm
File outdated by:  RHSA-2014:0369
    MD5: 2295f9d39e5e87fa8843f5c6158e2afb
httpd-devel-2.2.3-11.el5.x86_64.rpm
File outdated by:  RHSA-2014:0369
    MD5: 4603c4e041958a602c4bad393c90c6a7
httpd-manual-2.2.3-11.el5.x86_64.rpm
File outdated by:  RHSA-2014:0369
    MD5: 07e2c67b68e178bac107a3e61a929f23
 
Red Hat Enterprise Linux (v. 5 server)

SRPMS:
httpd-2.2.3-11.el5.src.rpm
File outdated by:  RHSA-2014:0369
    MD5: 3ee6039a6aa2beeb14c55695c48cb6be
 
IA-32:
httpd-2.2.3-11.el5.i386.rpm
File outdated by:  RHSA-2014:0369
    MD5: d734aeef038abf88bf4886911c124c7a
httpd-devel-2.2.3-11.el5.i386.rpm
File outdated by:  RHSA-2014:0369
    MD5: 2295f9d39e5e87fa8843f5c6158e2afb
httpd-manual-2.2.3-11.el5.i386.rpm
File outdated by:  RHSA-2014:0369
    MD5: c994b3e5b0e2ff8102043792505c91d4
mod_ssl-2.2.3-11.el5.i386.rpm
File outdated by:  RHSA-2014:0369
    MD5: 86a4778fab59148114af83ba1eca224f
 
IA-64:
httpd-2.2.3-11.el5.ia64.rpm
File outdated by:  RHSA-2014:0369
    MD5: c56a478f241fae66e5a98d9a7160c079
httpd-devel-2.2.3-11.el5.ia64.rpm
File outdated by:  RHSA-2014:0369
    MD5: 505c228afa459feb3273e1cea8e2be82
httpd-manual-2.2.3-11.el5.ia64.rpm
File outdated by:  RHSA-2014:0369
    MD5: 401a8cbb5de0e8db47c2ddb0c8373525
mod_ssl-2.2.3-11.el5.ia64.rpm
File outdated by:  RHSA-2014:0369
    MD5: fcec7364955523f2d57ccb51e43ad811
 
PPC:
httpd-2.2.3-11.el5.ppc.rpm
File outdated by:  RHSA-2014:0369
    MD5: 487e19dc73a7f1243fc380ec848c9ed8
httpd-devel-2.2.3-11.el5.ppc.rpm
File outdated by:  RHSA-2014:0369
    MD5: 07427ada748e7b16d2561534a14a02cf
httpd-devel-2.2.3-11.el5.ppc64.rpm
File outdated by:  RHSA-2014:0369
    MD5: 4997b231b3653909aa8f09dfc4635345
httpd-manual-2.2.3-11.el5.ppc.rpm
File outdated by:  RHSA-2014:0369
    MD5: 61b181d0f1bd39bbfa7909f1af0f5f12
mod_ssl-2.2.3-11.el5.ppc.rpm
File outdated by:  RHSA-2014:0369
    MD5: 2a9afa90dbde5d937b9c63b02ad86b8c
 
s390x:
httpd-2.2.3-11.el5.s390x.rpm
File outdated by:  RHSA-2014:0369
    MD5: 268a9c1257e6630d2630919609defbaf
httpd-devel-2.2.3-11.el5.s390.rpm
File outdated by:  RHSA-2014:0369
    MD5: 2cca0b16331ad72d7187f5311e38d919
httpd-devel-2.2.3-11.el5.s390x.rpm
File outdated by:  RHSA-2014:0369
    MD5: bfadb9ae50a4f5f9f55a9c486afaf916
httpd-manual-2.2.3-11.el5.s390x.rpm
File outdated by:  RHSA-2014:0369
    MD5: a88989c4b428cf512189c317e16eb70c
mod_ssl-2.2.3-11.el5.s390x.rpm
File outdated by:  RHSA-2014:0369
    MD5: 0ada06035539671248eda54a10e4c654
 
x86_64:
httpd-2.2.3-11.el5.x86_64.rpm
File outdated by:  RHSA-2014:0369
    MD5: 0030021cc1bc50b7c1d149f7c228d68a
httpd-devel-2.2.3-11.el5.i386.rpm
File outdated by:  RHSA-2014:0369
    MD5: 2295f9d39e5e87fa8843f5c6158e2afb
httpd-devel-2.2.3-11.el5.x86_64.rpm
File outdated by:  RHSA-2014:0369
    MD5: 4603c4e041958a602c4bad393c90c6a7
httpd-manual-2.2.3-11.el5.x86_64.rpm
File outdated by:  RHSA-2014:0369
    MD5: 07e2c67b68e178bac107a3e61a929f23
mod_ssl-2.2.3-11.el5.x86_64.rpm
File outdated by:  RHSA-2014:0369
    MD5: fd20a69dc6b00651fae0d0d86511b867
 
Red Hat Enterprise Linux Desktop (v. 5 client)

SRPMS:
httpd-2.2.3-11.el5.src.rpm
File outdated by:  RHSA-2014:0369
    MD5: 3ee6039a6aa2beeb14c55695c48cb6be
 
IA-32:
httpd-2.2.3-11.el5.i386.rpm
File outdated by:  RHSA-2014:0369
    MD5: d734aeef038abf88bf4886911c124c7a
mod_ssl-2.2.3-11.el5.i386.rpm
File outdated by:  RHSA-2014:0369
    MD5: 86a4778fab59148114af83ba1eca224f
 
x86_64:
httpd-2.2.3-11.el5.x86_64.rpm
File outdated by:  RHSA-2014:0369
    MD5: 0030021cc1bc50b7c1d149f7c228d68a
mod_ssl-2.2.3-11.el5.x86_64.rpm
File outdated by:  RHSA-2014:0369
    MD5: fd20a69dc6b00651fae0d0d86511b867
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

240024 - Mod_proxy_http ProxyErrorOverride eating cookies
240857 - [RFE] Apache does not report patch level when scanned
241680 - logrotate.d/httpd postrotate must use initscripts
245719 - mod_proxy configuration inheritance issue
245763 - long lines incorrectly handled by Apache's logresolve
250731 - CVE-2007-3847 httpd out of bounds read


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/