RHBA-2009:0185 - Bug Fix Advisory

Topic

Updated httpd packages that fix several bugs and add various enhancements
are now available.

Description

The Apache HTTP Server is a popular and freely-available Web server.

These updated httpd packages fix the following bugs:

• the mod_ldap module could cause unusually-high CPU usage after servicing

several requests when LDAP authentication was enabled. This has been fixed
in these updated packages so that high CPU usage no longer occurs in these
situations, thus resolving the issue.

• The mod_cache module now correctly processes requests with escaped URLs.

The mod_proxy and mod_cache modules have been upgrade to the newer upstream
version 2.2.9 of httpd. With this upgrade, the ProxyPassMatch directive,
load-balancing and content-caching are all now supported. In addition,
these updated packages also provide the following enhancements.

• The experimental event Multi-Processing Model (MPM) is now included in

/usr/sbin/httpd.event. MPM offers improved performance by using dedicated
threads to handle keepalive connections.

• mod_proxy_balancer can now match stickysession using alternative

parameter values.

• mod_ssl now supports dynamic OpenSSL locking callbacks. This feature is

required by some hardware cryptographic devices.

• During graceful restarts, httpd now uses the "OPTIONS *" request instead

of "GET /" to reduce server load.

• The mod_headers module now supports the "RequestHeader edit" directive.

Users of the Apache HTTP Server are advised to upgrade to these updated
packages, which resolves these issues and provides these enhancements.

Solution

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 367981 - reduce load during graceful restart
• BZ - 439218 - mod_proxy_balancer: configured session identifier is case-sensitive
• BZ - 439842 - mod_cache does not serve (CACHE_OUT) URLs which are url-escaped
• BZ - 440259 - mod_ldap high cpu usage after servicing a number of requests
• BZ - 440615 - there should be %{?dist} instead of %{dist} in the *.spec on the Release: line
• BZ - 454098 - Apache httpd does not proxy properly backend response with Transfer-Encoding: chunked
• BZ - 462044 - mod_ssl: add dynamic locking upcalls

CVEs

(none)

References

(none)