RHEA-2010:0252 - Product Enhancement Advisory

Topic

Updated httpd packages that fix bugs and add enhancements are now available.

Description

The Apache HTTP Server is a popular and freely-available Web server.

These updated httpd packages provide fixes for the following bugs:

• the mod_authnz_ldap module did not allow other modules to handle

authorization if no LDAP-specific requirements were used in the "Require"
directive. (BZ#448350)

• the httpd "init" script did not work correctly if the PidFile directive

was removed from httpd.conf. (BZ#505002)

• mod_ssl would fail to complete a handshake if more the 85 CAs were

configured using SSLCACertificateFile and/or SSLCACertificatePath.
(BZ#510515)

• the "X-Pad" header used for compatibility with old browser

implementations has been removed. (BZ#526110)

• mod_proxy_ajp could fail if uploading large files. (BZ#528640)
• .NET clients using the "Expect: 100-continue" header could cause spurious

responses. (BZ#533407)

• the OID() function supported in mod_ssl's SSLRequire directive could not

evaluate some extension types. (BZ#552942)

The following enhancements have also been made:

• the "DiscardPathInfo" flag (or "DPI") has been added to mod_rewrite.

(BZ#517500)

• the AuthLDAPRemoteUserAttribute directive has been added to

mod_authnz_ldap. (BZ#520838)

• the AuthLDAPDynamicGroups directive has been added to mod_authnz_ldap, to

enable support for dynamic groups. (BZ#252038)

• the mod_substitute module is now included. (BZ#539256)

All Apache users should install these updated packages which address these
issues.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 448350 - Problem on mod_authnz_ldap handle of "Require" configuration
• BZ - 505002 - httpd init script does not work when PidFile option is not set in httpd.conf
• BZ - 510515 - mod_ssl cannot handle more than 85 CAs
• BZ - 517500 - mod_rewrite adds path info postfix after a substitution occured
• BZ - 526110 - Remove X-Pad header from httpd (Apache)
• BZ - 528640 - mod_proxy_ajp fails with large file uploads
• BZ - 533407 - httpd causes connection/request problems with .Net framework clients
• BZ - 557049 - avoid use of rsync during build
• BZ - 566659 - [RFE] mod_ssl: Add SSLInsecureRenegotiation directive [rhel-5]

CVEs

(none)

References

(none)