MDKSA-2005:233 - Updated apache2 packages fix vulnerability in worker MPM
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDKSA-2005:233
http://www.mandriva.com/security/
_______________________________________________________________________
Package : apache2
Date : December 19, 2005
Affected: 10.1, 10.2, 2006.0
_______________________________________________________________________
Problem Description:
A memory leak in the worker MPM in Apache 2 could allow remote
attackers to cause a Denial of Service (memory consumption) via
aborted commands in certain circumstances, which prevents the
memory for the transaction pool from being reused for other
connections.
As well, this update addresses two bugs in the Mandriva 2006 Apache
packges where apachectl was missing and also a segfault that occured
when using the mod_ldap module.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2970
http://qa.mandriva.com/show_bug.cgi?id=18764
http://qa.mandriva.com/show_bug.cgi?id=20039
_______________________________________________________________________
Updated Packages:
Mandriva Linux 10.1:
2bd9be4b3efe255f4db55fce501d15a8 10.1/RPMS/apache2-2.0.50-7.5.101mdk.i586.rpm
cb9bdc9ef96ce17340128d43b2a00cf0
10.1/RPMS/apache2-common-2.0.50-7.5.101mdk.i586.rpm
aa201695e4c76d17f9a533ad7809660d
10.1/RPMS/apache2-devel-2.0.50-7.5.101mdk.i586.rpm
6e494c490870ed813cbf5b03092a0ed5
10.1/RPMS/apache2-manual-2.0.50-7.5.101mdk.i586.rpm
af3f760be31e9cdcc606a359e0994260
10.1/RPMS/apache2-mod_cache-2.0.50-7.5.101mdk.i586.rpm
6496ac5d42657d967a585dd5244a3138
10.1/RPMS/apache2-mod_dav-2.0.50-7.5.101mdk.i586.rpm
f510bd2caadb07420720ac14aa9e7ba5
10.1/RPMS/apache2-mod_deflate-2.0.50-7.5.101mdk.i586.rpm
51504aa311d28f43ae72d699d56cf2d0
10.1/RPMS/apache2-mod_disk_cache-2.0.50-7.5.101mdk.i586.rpm
7acd176a42ce0f5251e8b1f380fdfe63
10.1/RPMS/apache2-mod_file_cache-2.0.50-7.5.101mdk.i586.rpm
b359fc952ebdc85f7aa8536a644821b9
10.1/RPMS/apache2-mod_ldap-2.0.50-7.5.101mdk.i586.rpm
19b66959762b0b4f5a2ad27741e27d16
10.1/RPMS/apache2-mod_mem_cache-2.0.50-7.5.101mdk.i586.rpm
d12b0ef4e3c8a84d5eb11a7f07d14cca
10.1/RPMS/apache2-mod_proxy-2.0.50-7.5.101mdk.i586.rpm
6705ee3928a58246748d84173c6fa4ce
10.1/RPMS/apache2-modules-2.0.50-7.5.101mdk.i586.rpm
8db8adeabe3dd1f50ff6eb583e502c5f
10.1/RPMS/apache2-source-2.0.50-7.5.101mdk.i586.rpm
00c648dff79ae63e37240c5445462a46
10.1/RPMS/apache2-worker-2.0.50-7.5.101mdk.i586.rpm
14bbad2d7310bc36ba4a70eed392916f 10.1/SRPMS/apache2-2.0.50-7.5.101mdk.src.rpm
Mandriva Linux 10.1/X86_64:
1107fed88c85911bb749b6d579eb18a2
x86_64/10.1/RPMS/apache2-2.0.50-7.5.101mdk.x86_64.rpm
5ff4eb580bb7de3c3ac39ef78cc549b0
x86_64/10.1/RPMS/apache2-common-2.0.50-7.5.101mdk.x86_64.rpm
fcb64e228bb9dc32fae9c12c0cf82e0a
x86_64/10.1/RPMS/apache2-devel-2.0.50-7.5.101mdk.x86_64.rpm
5ee31fe2edc48dfe481e6927656fdb73
x86_64/10.1/RPMS/apache2-manual-2.0.50-7.5.101mdk.x86_64.rpm
efee4460197fdce90ceba72e97b0d429
x86_64/10.1/RPMS/apache2-mod_cache-2.0.50-7.5.101mdk.x86_64.rpm
217cd580c01d18e28923dbefbd8956d1
x86_64/10.1/RPMS/apache2-mod_dav-2.0.50-7.5.101mdk.x86_64.rpm
64c018efd41b3b9265ef73a9589551b8
x86_64/10.1/RPMS/apache2-mod_deflate-2.0.50-7.5.101mdk.x86_64.rpm
e4bdf02a516b061b6f783d6be5ad6484
x86_64/10.1/RPMS/apache2-mod_disk_cache-2.0.50-7.5.101mdk.x86_64.rpm
eb8843b6a5da24a283e56add50fe5ff6
x86_64/10.1/RPMS/apache2-mod_file_cache-2.0.50-7.5.101mdk.x86_64.rpm
a70b84f0f6e916eb3d72474fac8054c0
x86_64/10.1/RPMS/apache2-mod_ldap-2.0.50-7.5.101mdk.x86_64.rpm
723fe53862f96148b00bb9eb49eac03f
x86_64/10.1/RPMS/apache2-mod_mem_cache-2.0.50-7.5.101mdk.x86_64.rpm
bf6c31bd761c55ba63118aa0ed097430
x86_64/10.1/RPMS/apache2-mod_proxy-2.0.50-7.5.101mdk.x86_64.rpm
302e2e4e747f543e70f240415a1dc249
x86_64/10.1/RPMS/apache2-modules-2.0.50-7.5.101mdk.x86_64.rpm
cc67b2591839741292daceb69ceebeec
x86_64/10.1/RPMS/apache2-source-2.0.50-7.5.101mdk.x86_64.rpm
8d19a5c232217dc9d37a8a6c7e54af58
x86_64/10.1/RPMS/apache2-worker-2.0.50-7.5.101mdk.x86_64.rpm
14bbad2d7310bc36ba4a70eed392916f
x86_64/10.1/SRPMS/apache2-2.0.50-7.5.101mdk.src.rpm
Mandriva Linux 10.2:
7a717d4449621c80af6dee5d27930768 10.2/RPMS/apache2-2.0.53-9.3.102mdk.i586.rpm
183860d6f66c54c83f1775b633740aae
10.2/RPMS/apache2-common-2.0.53-9.3.102mdk.i586.rpm
f0a72c6c2149adc594509306e023ed5d
10.2/RPMS/apache2-devel-2.0.53-9.3.102mdk.i586.rpm
a061470d1ed5a2138ecaff29c5c6886d
10.2/RPMS/apache2-manual-2.0.53-9.3.102mdk.i586.rpm
bc74e9cc29cb7e23a1fe65bb0ed3920f
10.2/RPMS/apache2-mod_cache-2.0.53-9.3.102mdk.i586.rpm
cd12164f2469ba93a5d2b12580fe649c
10.2/RPMS/apache2-mod_dav-2.0.53-9.3.102mdk.i586.rpm
a60dd49e55ebe94555f32565daf7afd5
10.2/RPMS/apache2-mod_deflate-2.0.53-9.3.102mdk.i586.rpm
a9879d4626cc9caff65b07a80eba98df
10.2/RPMS/apache2-mod_disk_cache-2.0.53-9.3.102mdk.i586.rpm
735d990fc88f84c0909cfad79a8bff81
10.2/RPMS/apache2-mod_file_cache-2.0.53-9.3.102mdk.i586.rpm
f21bd7e0044a979f6fdda069a3b6d249
10.2/RPMS/apache2-mod_ldap-2.0.53-9.3.102mdk.i586.rpm
17100953c39108c5e2fdd717424fc037
10.2/RPMS/apache2-mod_mem_cache-2.0.53-9.3.102mdk.i586.rpm
a13025b3c7c172f2ff6e7a5dd2c08b7e
10.2/RPMS/apache2-mod_proxy-2.0.53-9.3.102mdk.i586.rpm
941683647c0c5fb7b4bc75bf31a21bd1
10.2/RPMS/apache2-modules-2.0.53-9.3.102mdk.i586.rpm
2b27d3bc4b7a7f64f46ce188942a48e7
10.2/RPMS/apache2-peruser-2.0.53-9.3.102mdk.i586.rpm
627a8f20409c88205cf986a06aabd619
10.2/RPMS/apache2-source-2.0.53-9.3.102mdk.i586.rpm
040f062644ea9b4e3b1911c3a3c86bf1
10.2/RPMS/apache2-worker-2.0.53-9.3.102mdk.i586.rpm
9394a8045e4b30ab718f12af30a6419c 10.2/SRPMS/apache2-2.0.53-9.3.102mdk.src.rpm
Mandriva Linux 10.2/X86_64:
8adf3cec1469b1438fc1bcc39617f44c
x86_64/10.2/RPMS/apache2-2.0.53-9.3.102mdk.x86_64.rpm
5f76fa8d3861639458c81c69871c5f9b
x86_64/10.2/RPMS/apache2-common-2.0.53-9.3.102mdk.x86_64.rpm
50a6a93d1253149ad9e806374b4504c3
x86_64/10.2/RPMS/apache2-devel-2.0.53-9.3.102mdk.x86_64.rpm
c8cd7c7e195c437bccf42a9f258fdf8f
x86_64/10.2/RPMS/apache2-manual-2.0.53-9.3.102mdk.x86_64.rpm
0823b168372f197fa6999a9e2d05de3f
x86_64/10.2/RPMS/apache2-mod_cache-2.0.53-9.3.102mdk.x86_64.rpm
05860b6902213d4d79176d04b63dd3be
x86_64/10.2/RPMS/apache2-mod_dav-2.0.53-9.3.102mdk.x86_64.rpm
24c72e1292c058019800339127e635e4
x86_64/10.2/RPMS/apache2-mod_deflate-2.0.53-9.3.102mdk.x86_64.rpm
3045bf69ece21ca53190cdb406c666bf
x86_64/10.2/RPMS/apache2-mod_disk_cache-2.0.53-9.3.102mdk.x86_64.rpm
6aa53566606b45d996eb1971beb3e99d
x86_64/10.2/RPMS/apache2-mod_file_cache-2.0.53-9.3.102mdk.x86_64.rpm
c3546e238ad287b54c48fe3511cbe2c9
x86_64/10.2/RPMS/apache2-mod_ldap-2.0.53-9.3.102mdk.x86_64.rpm
65425eab43d9d73bbcb74415681131bf
x86_64/10.2/RPMS/apache2-mod_mem_cache-2.0.53-9.3.102mdk.x86_64.rpm
83d77981adab93bcb0ac9dc7710411e9
x86_64/10.2/RPMS/apache2-mod_proxy-2.0.53-9.3.102mdk.x86_64.rpm
fd9aeb855cf55bb3dad084d961a0b464
x86_64/10.2/RPMS/apache2-modules-2.0.53-9.3.102mdk.x86_64.rpm
5d35f5d27d79cbcedf7364145934ab4c
x86_64/10.2/RPMS/apache2-peruser-2.0.53-9.3.102mdk.x86_64.rpm
616167bc2777e66515bb2ab97b2120e1
x86_64/10.2/RPMS/apache2-source-2.0.53-9.3.102mdk.x86_64.rpm
0f0818c4e0aa253243bf4ed75bb262ee
x86_64/10.2/RPMS/apache2-worker-2.0.53-9.3.102mdk.x86_64.rpm
9394a8045e4b30ab718f12af30a6419c
x86_64/10.2/SRPMS/apache2-2.0.53-9.3.102mdk.src.rpm
Mandriva Linux 2006.0:
8c2e56237762ca2b920a1a55d7420016
2006.0/RPMS/apache-base-2.0.54-13.1.20060mdk.i586.rpm
1d9a5e33955305d489df97ab89ef52aa
2006.0/RPMS/apache-devel-2.0.54-13.1.20060mdk.i586.rpm
8d9f566878a21e83c27ad01cc379f338
2006.0/RPMS/apache-mod_cache-2.0.54-13.1.20060mdk.i586.rpm
1f94fcf8699c61a32d4398bf1eb276e1
2006.0/RPMS/apache-mod_dav-2.0.54-13.1.20060mdk.i586.rpm
d4de68206b8d739a2c05a0b6128b9e31
2006.0/RPMS/apache-mod_deflate-2.0.54-13.1.20060mdk.i586.rpm
35cbfea9284dcbdf80b3290b3ba9bdc1
2006.0/RPMS/apache-mod_disk_cache-2.0.54-13.1.20060mdk.i586.rpm
c2f06b3fc1ef1997ad07ae5ab250b8ec
2006.0/RPMS/apache-mod_file_cache-2.0.54-13.1.20060mdk.i586.rpm
8adc73861339e6fce0cab039f3290f10
2006.0/RPMS/apache-mod_ldap-2.0.54-13.1.20060mdk.i586.rpm
07674c7c5b7a8c47ec660715983b89f5
2006.0/RPMS/apache-mod_mem_cache-2.0.54-13.1.20060mdk.i586.rpm
179068c127a2cf35994db139effd5aff
2006.0/RPMS/apache-mod_proxy-2.0.54-13.1.20060mdk.i586.rpm
3f93fa86ad996d390c3f71335f62e2f2
2006.0/RPMS/apache-modules-2.0.54-13.1.20060mdk.i586.rpm
743f286293b9dcd07882daebd03b5df5
2006.0/RPMS/apache-mod_userdir-2.0.54-13.1.20060mdk.i586.rpm
efcd010c193e3f60582a2ae63afd95ef
2006.0/RPMS/apache-mpm-peruser-2.0.54-13.1.20060mdk.i586.rpm
bfb03e006eedc7b1e0910f9807ce7392
2006.0/RPMS/apache-mpm-prefork-2.0.54-13.1.20060mdk.i586.rpm
ca840aa1b0f0f347ed30536b45eb34a9
2006.0/RPMS/apache-mpm-worker-2.0.54-13.1.20060mdk.i586.rpm
63f8c448522bc1c0ae892bb02eecbb7e
2006.0/RPMS/apache-source-2.0.54-13.1.20060mdk.i586.rpm
b74ea800182ad60fd8f8ae092d7b3964
2006.0/SRPMS/apache-2.0.54-13.1.20060mdk.src.rpm
Mandriva Linux 2006.0/X86_64:
17ee0266edad70b1539a76cc54b427bf
x86_64/2006.0/RPMS/apache-base-2.0.54-13.1.20060mdk.x86_64.rpm
1137d500824c067c57599a8f3fbeebb1
x86_64/2006.0/RPMS/apache-devel-2.0.54-13.1.20060mdk.x86_64.rpm
adf8be47f522c8b1dc54ac65dc5093db
x86_64/2006.0/RPMS/apache-mod_cache-2.0.54-13.1.20060mdk.x86_64.rpm
40abf9129488584b3f5a8ef640c24e25
x86_64/2006.0/RPMS/apache-mod_dav-2.0.54-13.1.20060mdk.x86_64.rpm
76e319bbd6ee24e26e7e6ff6c320a117
x86_64/2006.0/RPMS/apache-mod_deflate-2.0.54-13.1.20060mdk.x86_64.rpm
3883e6d6e7eb1a5d2b78fde6cc518e77
x86_64/2006.0/RPMS/apache-mod_disk_cache-2.0.54-13.1.20060mdk.x86_64.rpm
6fb0017dd601263cccc1fbba206fff1e
x86_64/2006.0/RPMS/apache-mod_file_cache-2.0.54-13.1.20060mdk.x86_64.rpm
88896435cd517befcd3bdf204bf252cc
x86_64/2006.0/RPMS/apache-mod_ldap-2.0.54-13.1.20060mdk.x86_64.rpm
20103975292445f4ee9f5447541fa7d4
x86_64/2006.0/RPMS/apache-mod_mem_cache-2.0.54-13.1.20060mdk.x86_64.rpm
1f666354f9d874b86d2c221214acb456
x86_64/2006.0/RPMS/apache-mod_proxy-2.0.54-13.1.20060mdk.x86_64.rpm
b14f7af9d81118e2b04d3ad7e02b28f9
x86_64/2006.0/RPMS/apache-modules-2.0.54-13.1.20060mdk.x86_64.rpm
ff61d6d64a8b636df70484c157e25157
x86_64/2006.0/RPMS/apache-mod_userdir-2.0.54-13.1.20060mdk.x86_64.rpm
3f7eab0128ecf4b9f6235549435ee786
x86_64/2006.0/RPMS/apache-mpm-peruser-2.0.54-13.1.20060mdk.x86_64.rpm
bf107b37c81711c4b1d76d6fe3a33d4e
x86_64/2006.0/RPMS/apache-mpm-prefork-2.0.54-13.1.20060mdk.x86_64.rpm
907f4bacd887c4c7da3d61f8b0bd5307
x86_64/2006.0/RPMS/apache-mpm-worker-2.0.54-13.1.20060mdk.x86_64.rpm
0d1916804450c4d0e4bdfb72eaee2662
x86_64/2006.0/RPMS/apache-source-2.0.54-13.1.20060mdk.x86_64.rpm
b74ea800182ad60fd8f8ae092d7b3964
x86_64/2006.0/SRPMS/apache-2.0.54-13.1.20060mdk.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFDpwLdmqjQ0CJFipgRAsxnAJ4qCp5TBNacrH50QpnTt/keZvwfGwCg2zBV
22XEEzvKprGEQ7WdeMXEz5g=
=3EBS
-----END PGP SIGNATURE-----