RHBA-2005:222 - Bug Fix Advisory

Topic

Updated httpd and apr packages that include several bug fixes are now
available.

Description

The Apache HTTP server is a powerful, full-featured, efficient, and
freely-available Web server. The Apache Portable Runtime library is the
portability library used by the Apache HTTP Server.

The apachectl script is the traditional way to control the httpd daemon
without using init scripts. This script did not honor the $OPTIONS
environment variable configured in /etc/sysconfig/httpd.

The sendfile() system call can be used in the apr and httpd packages to
improve performance when sending files to the network. On the IBM S/390
platform only, support for this system call was not enabled, as server
performance was impaired.

The htdigest utility can be used to maintain password digest lookup files
for use with the mod_auth_digest module. When creating a new digest file,
the permissions of the new file were not correctly initialized.

The following bugs were also fixed in modules included in httpd:

• The mod_proxy module did not correctly handle the case where the

connection to the client browser was aborted prematurely.

• The mod_include module would truncate by one character the expansion of

variables which had a length which was a multiple of 64 bytes.

• The SSLUserName setting in the mod_ssl module did not set the request

user variable at the correct phase during request processing.

Users should upgrade to these updated packages, which resolve these
issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

CVEs

(none)

References

(none)