LISTSERV - SCIENTIFIC-LINUX-ERRATA Archives

SCIENTIFIC-LINUX-ERRATA Archives

August 2019

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV

	LISTSERV Archives
	SCIENTIFIC-LINUX-ERRATA Home
	SCIENTIFIC-LINUX-ERRATA August 2019

	Log In
	Register

	Subscribe or Unsubscribe

	Search Archives

Options:	Use Monospaced Font Show Text Part by Default Show All Mail Headers
Message:	[<< First] [< Prev] [Next >] [Last >>]
Topic:	[<< First] [< Prev] [Next >] [Last >>]
Author:	[<< First] [< Prev] [Next >] [Last >>]

Subject:	Security ERRATA Moderate: httpd on SL7.x x86_64
From:	Farhan Ahmed <[log in to unmask]>
Reply To:	[log in to unmask]
Date:	Mon, 26 Aug 2019 18:59:52 -0000
Content-Type:	text/plain
Parts/Attachments:	text/plain (31 lines)

Synopsis: Moderate: httpd security and bug fix update
Advisory ID:       SLSA-2019:2343-1
Issue Date:        2019-08-06
CVE Numbers:       CVE-2019-0220
                   CVE-2019-0217
--

Security Fix(es):

* httpd: mod_auth_digest: access control bypass due to race condition
(CVE-2019-0217)

* httpd: URL normalization inconsistency (CVE-2019-0220)
--

SL7
  x86_64
    httpd-tools-2.4.6-90.el7.x86_64.rpm
    mod_ssl-2.4.6-90.el7.x86_64.rpm
    httpd-devel-2.4.6-90.el7.x86_64.rpm
    httpd-manual-2.4.6-90.el7.noarch.rpm
    httpd-2.4.6-90.el7.x86_64.rpm
    mod_session-2.4.6-90.el7.x86_64.rpm
    mod_proxy_html-2.4.6-90.el7.x86_64.rpm
    mod_ldap-2.4.6-90.el7.x86_64.rpm
    httpd-debuginfo-2.4.6-90.el7.x86_64.rpm
  noarch
    httpd-manual-2.4.6-90.el7.noarch.rpm

- Scientific Linux Development Team

ATOM RSS1 RSS2

LISTSERV.FNAL.GOV