[SECURITY] Fedora Core 5 Update: httpd-2.2.2-1.3
by Joe Orton
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-617
2007-07-02
---------------------------------------------------------------------
Product : Fedora Core 5
Name : httpd
Version : 2.2.2
Release : 1.3
Summary : Apache HTTP Server
Description :
The Apache HTTP Server is a powerful, efficient, and extensible
web server.
---------------------------------------------------------------------
Update Information:
The Apache HTTP Server did not verify that a process was an
Apache child process before sending it signals. A local
attacker with the ability to run scripts on the Apache HTTP
Server could manipulate the scoreboard and cause arbitrary
processes to be terminated which could lead to a denial of
service (CVE-2007-3304). This issue is not exploitable on
Fedora if using the default SELinux targeted policy.
A flaw was found in the Apache HTTP Server mod_status
module. On sites where the server-status page is publicly
accessible and ExtendedStatus is enabled this could lead to
a cross-site scripting attack. On Fedora the server-status
page is not enabled by default and it is best practice to
not make this publicly available. (CVE-2006-5752)
A bug was found in the Apache HTTP Server mod_cache module.
On sites where caching is enabled, a remote attacker could
send a carefully crafted request that would cause the Apache
child process handling that request to crash. This could
lead to a denial of service if using a threaded
Multi-Processing Module. (CVE-2007-1863)
---------------------------------------------------------------------
* Tue Jun 26 2007 Joe Orton <jorton(a)redhat.com> 2.2.2-1.3
- add security fixes for CVE-2006-5752, CVE-2007-1863 and
CVE-2007-3304 (#244660)
* Wed Jul 26 2006 Joe Orton <jorton(a)redhat.com> 2.2.2-1.2
- add mod_rewrite security fix (CVE-2006-3747)
* Wed Jul 19 2006 Joe Orton <jorton(a)redhat.com> 2.2.2-1.1
- fix segfault on dummy connection failure at graceful restart (#199429)
* Thu May 11 2006 Joe Orton <jorton(a)redhat.com> 2.2.2-1.0
- update to 2.2.2
* Thu Apr 6 2006 Joe Orton <jorton(a)redhat.com> 2.2.0-5.2
- fix LDAP issues on 64-bit platforms (#188073)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/
e6b405078d61866b253996c01dd6d2a665d03f16 SRPMS/httpd-2.2.2-1.3.src.rpm
e6b405078d61866b253996c01dd6d2a665d03f16 noarch/httpd-2.2.2-1.3.src.rpm
2da7ae8b7154edd1c29b38e3e4fd00d81be6f630 ppc/httpd-2.2.2-1.3.ppc.rpm
62804f3fe97fdfd71f9dcde7f7c40800b91df202 ppc/mod_ssl-2.2.2-1.3.ppc.rpm
01891fbb3306fc6412780032f448cd9f28fc79f2 ppc/httpd-manual-2.2.2-1.3.ppc.rpm
4bf976824e0b4f90084c16dbf5f6d4d923fa4f7d ppc/httpd-devel-2.2.2-1.3.ppc.rpm
273e782b60cfbccf3de7f1538c37a26a82d570d3 ppc/debug/httpd-debuginfo-2.2.2-1.3.ppc.rpm
9a539f3dad1f404318846dd1b7323bf092e249dd x86_64/httpd-devel-2.2.2-1.3.x86_64.rpm
940d606295b6105d613193fd7c4d61fe570839c0 x86_64/debug/httpd-debuginfo-2.2.2-1.3.x86_64.rpm
6e81a89d11d9e2a40f9e81fc208b0da18dff98d4 x86_64/mod_ssl-2.2.2-1.3.x86_64.rpm
03dd6c692195b23ea06e5d547b8c110e80f337d9 x86_64/httpd-manual-2.2.2-1.3.x86_64.rpm
870e9a7132a66f522e1591d838e755a133810bca x86_64/httpd-2.2.2-1.3.x86_64.rpm
7ac8528edd458749edf22723fd464f3753a43cc2 i386/httpd-manual-2.2.2-1.3.i386.rpm
93d9f497f51185c2d8807f10bad7bcf4d79bad0e i386/httpd-2.2.2-1.3.i386.rpm
8b932638ad7c828cf728ddfab432420a8f73545a i386/debug/httpd-debuginfo-2.2.2-1.3.i386.rpm
9c19dd3c181a74d0ee3424421e539dc320dbe1b7 i386/httpd-devel-2.2.2-1.3.i386.rpm
467f4e8b50318ab8d97d857df53cd6a3cda6cd92 i386/mod_ssl-2.2.2-1.3.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
16 years, 9 months
Fedora Core 6 Update: gcc-4.1.2-13.fc6
by Jakub Jelinek
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-622
2007-07-02
---------------------------------------------------------------------
Product : Fedora Core 6
Name : gcc
Version : 4.1.2
Release : 13.fc6
Summary : Various compilers (C, C++, Objective-C, Java, ...)
Description :
The gcc package contains the GNU Compiler Collection version 4.1.
You'll need this package in order to compile C code.
---------------------------------------------------------------------
* Tue Jun 26 2007 Jakub Jelinek <jakub(a)redhat.com> 4.1.2-13.fc6
- update from gcc-4_1-branch (-r120507:126008)
- GCC 4.1.2 release
- PRs inline-asm/32109, rtl-optimization/28011, target/32389,
libfortran/31409, libfortran/31880, libfortran/31964,
rtl-optimization/31691, target/31022, target/31480, target/31701,
target/31876, target/32163, tree-optimization/26998, c++/30016,
c++/30221, middle-end/30761, target/18989, target/28675,
tree-optimization/29446, tree-optimization/31698, middle-end/31448,
preprocessor/30468, target/28623, target/31641, c++/30168, c++/31074,
c++/31449, c++/31517, c/31520, middle-end/30729, target/25448,
target/30289, target/30483, target/31361, target/31582,
testsuite/31578, target/31137, target/31380, fortran/31184,
target/31245, tree-optimization/30590, debug/29906, middle-end/30364,
middle-end/30433, target/31123, c++/30852, c++/30895,
classpath/28550, fortran/29441, fortran/30400, libgcj/17002,
libgfortran/30910, libgfortran/30918, other/31050,
rtl-optimization/30931, target/30848, tree-optimization/29925,
ada/30684, fortran/30478, fortran/30799, middle-end/24427,
other/27843, rtl-optimization/28173, rtl-optimization/28772,
rtl-optimization/29599, rtl-optimization/30787, target/19087,
tree-optimization/30823, fortran/24783, testsuite/30649,
middle-end/30313, c++/29487, target/29487, target/30370,
c++/28988, fortran/30278, libstdc++/30586, middle-end/29683,
objc/27438, c++/28999, libgfortran/30435, objc/30479,
rtl-optimization/29329, target/30173, testsuite/12325, target/24036
- reenable memory CSE (Alexandre Oliva, #229366, PR rtl-optimization/30643)
- backported OpenMP fixes from trunk and gcc-4_2-branch
- PRs middle-end/32362, tree-optimization/31769, c++/32177, c++/30703,
middle-end/27416, middle-end/30421, middle-end/30494
- on ppc{,64} when tuning for power6{,x}, try to put the base
register as first operand in instructions to improve
performance (Peter Bergner, #225425, PR middle-end/28690)
- on ppc64 emit nop after a call and disallow sibling calls
if the target function is not defined in the same object file
(David Edelsohn, #245424)
- gomp parallel sections fix and fix for checking whether combined
parallel can be used (PR libgomp/32468)
- don't set TREE_READONLY on C++ objects that need runtime initialization
(PRs c++/31806, c++/31809)
- fix computation of common pointer type (PR tree-optimization/32139)
- precompute const and pure fn calls inside another fn call arguments
with accumulating outgoing args
(PRs middle-end/32285, tree-optimization/30493)
- fix handling of RESULT_DECLs in points-to analysis
(#243438, PR tree-optimization/32353)
- don't increase alignment of TLS variables too much
- __do_global_dtors_aux hardening (#240422)
- allow libgomp to be dlopened (PR libgomp/28482)
- speed up and improve libgomp omp_get_num_procs and dynamic
thread count computation
- GOMP_CPU_AFFINITY support
- fix ICE on C++ type passed as OpenMP clause variable (PR c++/31748)
- fix a couple of translation bugs that could lead to ICEs (#235008)
- fix ICE with #pragma omp parallel inside of a try catch construct
(PR tree-optimization/30558)
- fix OpenMP clause handling in templates (PR c++/31598)
- fix folding of comparisions against min, min+1, max-1, max
(#236711, PR tree-optimization/31632)
- fix _mm_cmpord_ss on i?86/x86_64 (#237067)
- deque::erase fix (Steve LoBasso, Paolo Carlini, #234515)
- fix a regression caused by C++ visibility fixes (Jason Merrill,
PR c++/31187)
- fix C++ ICE on i ? j : k = (void) 0; (PR c++/30847)
- fix C++ accepts invalid bug (Mark Mitchell, PR c++/30863)
- fix random seed handling with -frepo (Alexandre Oliva, #228769)
- fix fortran OPEN without ACTION on read-only filesystem (#231134)
- fix fortran module writer ICEs on implicit conversions (#231261)
- fix !$omp space space parsing in Fortran
- fix Fortran -ff2c (Tobias Schlueter, #229110, PR fortran/25392)
- fix ICE in dwarf2out with limbo die nodes in namespace context
(Alexandre Oliva, #240503, #227376)
- fix a SRA bug with bitfields (Alexandre Oliva, #223576)
- package up ammintrin.h on i386/x86_64
- fix AMDfam10 testcases (H.J. Lu)
- fix f951 assert accessing memory after free (H.J. Lu, PR fortran/27351)
- add AMDfam10 support (Harsha Jagasia, #222897)
- add -march=core2 and -mtune=core2 support (Vlad Makarov)
- fix sprintf builtin (PR middle-end/30473)
- fix ICE on invalid __thread register on fields (PR c++/30536)
- ignore install-info errors in scriptlets (#223687)
- rename MNI and mni to SSSE3 and ssse3, keep -m{,no-}mni option and
__MNI__ macro for compatibility
- combiner fixes (Richard Sandiford, PR rtl-optimization/25514,
PR rtl-optimization/27736)
- fix build against post RHEL5 GA firefox-devel (#234435)
* Sun Feb 25 2007 Jakub Jelinek <jakub(a)redhat.com> 4.1.1-52.fc6.2
- add gnu.java.util.ZoneInfo class, use tzdata files for libgcj
timezone stuff instead of builtin simple and outdated rules (#227888)
* Wed Jan 17 2007 Jakub Jelinek <jakub(a)redhat.com> 4.1.1-52.fc6
- rebuilt against new gmp-devel (#223038)
- fix libgomp testsuite driver (Ulrich Weigand)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
8ed361dbfb367bcf149db3fcad13ecfeefcc5e38 SRPMS/gcc-4.1.2-13.fc6.src.rpm
8ed361dbfb367bcf149db3fcad13ecfeefcc5e38 noarch/gcc-4.1.2-13.fc6.src.rpm
e4114f778e0df188b4473771a6b671561d6579f5 ppc/libgcj-devel-4.1.2-13.fc6.ppc.rpm
d9cb99d674096aa1c9abbfa5b7291b98cacb1596 ppc/gcc-objc-4.1.2-13.fc6.ppc.rpm
aa2735fa69a1b6b5c2d95171c7fdbf1ae51d882f ppc/gcc-4.1.2-13.fc6.ppc.rpm
4a531bbceb16328d6a6cee6f35ac6b4efb29f94c ppc/libgcj-src-4.1.2-13.fc6.ppc.rpm
c70a4c7760b2907891229731867bd7058f8fa313 ppc/libmudflap-4.1.2-13.fc6.ppc.rpm
6f8823bc2b2126c73c5059c65f040a44b9a49afc ppc/libmudflap-devel-4.1.2-13.fc6.ppc.rpm
ec598004a27413bbc9527ff52b28cab5ab021824 ppc/libgomp-4.1.2-13.fc6.ppc.rpm
7598756fb5d5a01a2864ec7cc7831c7779b36193 ppc/gcc-c++-4.1.2-13.fc6.ppc.rpm
c6693921b5324e770d24557f1ad4dd5822d28c13 ppc/libgfortran-4.1.2-13.fc6.ppc.rpm
6cb34a774cac081159fb83034b1182c7499e9395 ppc/gcc-gfortran-4.1.2-13.fc6.ppc.rpm
cae053f880631874bae7ae5e642ad4e795f2138e ppc/libgcj-4.1.2-13.fc6.ppc.rpm
8e62e3dd0b00bdf07e6418c4e327fe1089ae18c6 ppc/gcc-java-4.1.2-13.fc6.ppc.rpm
0d86184a1812f1f3592e55ef44eb790b763f90bd ppc/libstdc++-devel-4.1.2-13.fc6.ppc.rpm
654b0d090025c06d59d69b0813e34bfe938b4575 ppc/libstdc++-4.1.2-13.fc6.ppc.rpm
3d03c3370f497884933dcc292cfc8f8661157b4e ppc/cpp-4.1.2-13.fc6.ppc.rpm
6b50e26d4e988a44aca3113f338a234d1abc8a0b ppc/libobjc-4.1.2-13.fc6.ppc.rpm
28ca0d2bb3c3d42c985f4bfaf76f23914c2e8da1 ppc/libgcc-4.1.2-13.fc6.ppc.rpm
93627b0ea4b86e843432be94e5a590084cd696d5 ppc/gcc-objc++-4.1.2-13.fc6.ppc.rpm
151fa4708a6a96d55689c3c3d91b3996eed7eab1 ppc/debug/gcc-debuginfo-4.1.2-13.fc6.ppc.rpm
ce8889a4afe2ceef62ae258c6b5df9a60bc4f27f x86_64/cpp-4.1.2-13.fc6.x86_64.rpm
2ea1afb3f2a5dc08ad3100917a13cc5b1413fb2c x86_64/gcc-objc++-4.1.2-13.fc6.x86_64.rpm
ea7f9681b3c3757d79519572d5b95aee04a13cf5 x86_64/libstdc++-devel-4.1.2-13.fc6.x86_64.rpm
e81d64876878516b413b37e84d346d235be83c24 x86_64/gcc-4.1.2-13.fc6.x86_64.rpm
592b10de722ba93d874cbdc5cac46bf0be1d313f x86_64/gcc-gfortran-4.1.2-13.fc6.x86_64.rpm
e5d2b7a2e133815f0db329e3c7dd733cb7151b9b x86_64/gcc-c++-4.1.2-13.fc6.x86_64.rpm
abb94f570bf057f31194403ec4a6074a83a31aae x86_64/gcc-java-4.1.2-13.fc6.x86_64.rpm
0897f98510b64decfa3de52568b68701778110cd x86_64/libgcj-4.1.2-13.fc6.x86_64.rpm
24a7f39f5b6c83e8ab7e6e1e481b275ba1818895 x86_64/libgcc-4.1.2-13.fc6.x86_64.rpm
6e78cd73a020b699cc76dcdab5f9c8e70c221e40 x86_64/libobjc-4.1.2-13.fc6.x86_64.rpm
8537350433fa1718fe8bdb45bfd5b8bb954eab92 x86_64/libmudflap-4.1.2-13.fc6.x86_64.rpm
fb137a06de887a6d8283d5e14a81bb56140a6c6c x86_64/debug/gcc-debuginfo-4.1.2-13.fc6.x86_64.rpm
e93926be65b26b34858c7f4cbda42f29b655c11f x86_64/libgomp-4.1.2-13.fc6.x86_64.rpm
49d124e91e150966f115d66fe2a3d8c9fe4c84b9 x86_64/libgfortran-4.1.2-13.fc6.x86_64.rpm
1edc5f2947cebde9aff5583970301617657bd8d0 x86_64/libmudflap-devel-4.1.2-13.fc6.x86_64.rpm
0218ed453f287142cdbd5eec7ce46d3fc8800e28 x86_64/libgcj-devel-4.1.2-13.fc6.x86_64.rpm
07a006fac028eda575698224bcf51d87966c23d9 x86_64/gcc-objc-4.1.2-13.fc6.x86_64.rpm
b771962c8b8cbd5ef9c41a26918e905c6b671a09 x86_64/libgnat-4.1.2-13.fc6.x86_64.rpm
4c9cccd7b97218299a69d2e91822aeac9599fb81 x86_64/libgcj-src-4.1.2-13.fc6.x86_64.rpm
d2ef5cae7c6b424c2bf6383a16b89e32143be58e x86_64/gcc-gnat-4.1.2-13.fc6.x86_64.rpm
f188e62cbd674e0495624813ce06458b1f6f162f x86_64/libstdc++-4.1.2-13.fc6.x86_64.rpm
a1190f9d670cdc97d414a33f139aede5d71bddb4 i386/libgcj-4.1.2-13.fc6.i386.rpm
12c61fef493f37a6e1d6ba9aa36583958591817a i386/libgomp-4.1.2-13.fc6.i386.rpm
865515dfc3b237533c09688a0ef722103b7f7356 i386/libgcj-devel-4.1.2-13.fc6.i386.rpm
030ea8e2a6c268b407d64f832b2ea15716f24e89 i386/debug/gcc-debuginfo-4.1.2-13.fc6.i386.rpm
50cd46b53b933fabdfefd33d076aa1a144253449 i386/libstdc++-4.1.2-13.fc6.i386.rpm
bd82ca37e886797fc8b94af1bba481136ce2114e i386/libmudflap-devel-4.1.2-13.fc6.i386.rpm
0ac79c2ac5fe0cf088ac38f168c742e0d73f71de i386/libgcj-src-4.1.2-13.fc6.i386.rpm
7e3ae02c754b97348c42c7fe270153213854ea20 i386/libgcc-4.1.2-13.fc6.i386.rpm
6cb3101f5f044f20066be2fc24093de0691a83d1 i386/gcc-gnat-4.1.2-13.fc6.i386.rpm
a6e789d8765dfe48baf59460624a3cbf0da9c5e7 i386/gcc-4.1.2-13.fc6.i386.rpm
02c449b8f0a0da1a04b505e3da89f8891fcefb92 i386/libgfortran-4.1.2-13.fc6.i386.rpm
e28d7580c62c49c52c9848897fde2103b6706c3a i386/gcc-objc-4.1.2-13.fc6.i386.rpm
2719a831f59e2a514eab5b18467a893b0d8ef3fd i386/cpp-4.1.2-13.fc6.i386.rpm
8eba14f5918a395ed57cf8f87e8a2e7fb57bbf22 i386/libmudflap-4.1.2-13.fc6.i386.rpm
c97a22843b59390e0d36edf7df9d0aaf8f86293b i386/gcc-c++-4.1.2-13.fc6.i386.rpm
1c0721bf6734bd7b5ecd2a1461813deeed5d0a6c i386/libstdc++-devel-4.1.2-13.fc6.i386.rpm
e76c48793f4aa7acdecccf9a8446c18d9c8685a7 i386/libobjc-4.1.2-13.fc6.i386.rpm
338a30b5cda05ecafb32e477c604d9b633305685 i386/gcc-objc++-4.1.2-13.fc6.i386.rpm
3592e804d93f21510bb117e34758eba3e761fbf5 i386/libgnat-4.1.2-13.fc6.i386.rpm
fb4d4d9053a4944e7fade2d08d0135588fc60ee0 i386/gcc-gfortran-4.1.2-13.fc6.i386.rpm
d97dc46a7053a17108036d598c14a4706a178147 i386/gcc-java-4.1.2-13.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
16 years, 9 months
Fedora Core 6 Update: binutils-2.17.50.0.6-5.fc6
by Jakub Jelinek
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-116
2007-07-02
---------------------------------------------------------------------
Product : Fedora Core 6
Name : binutils
Version : 2.17.50.0.6
Release : 5.fc6
Summary : A GNU collection of binary utilities.
Description :
Binutils is a collection of binary utilities, including ar (for
creating, modifying and extracting from archives), as (a family of GNU
assemblers), gprof (for displaying call graph profile data), ld (the
GNU linker), nm (for listing symbols from object files), objcopy (for
copying and translating object files), objdump (for displaying
information from object files), ranlib (for generating an index for
the contents of an archive), size (for listing the section sizes of an
object or archive file), strings (for listing printable strings from
files), strip (for discarding symbols), and addr2line (for converting
addresses to file and line).
---------------------------------------------------------------------
* Wed Jun 27 2007 Jakub Jelinek <jakub(a)redhat.com> 2.17.50.0.6-5.fc6
- fix ld --unique with new DWARF3 sections .debug_ranges and .debug_pubtypes
(Alan Modra, #241252)
- fix segfault in ppc64 version script handling (Andreas Schwab)
- SSE4 support in gas and objdump (H.J.Lu, #223120)
- compile binutils with -D_FILE_OFFSET_BITS=64 (#215514)
- fix ld --emit-relocs on ppc64 (Alan Modra, #235221)
- fix ppc32 ld segfault with -msecure-plt (Alan Modra, BZ#4267)
* Fri Jan 19 2007 Jakub Jelinek <jakub(a)redhat.com> 2.17.50.0.6-3.fc6
- 10x linking speedup on large C++ apps (#223181)
- fix tekhex reader
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
d2815f2b3fef5795af28af1c31f4bb9c6c7de7e6 SRPMS/binutils-2.17.50.0.6-5.fc6.src.rpm
d2815f2b3fef5795af28af1c31f4bb9c6c7de7e6 noarch/binutils-2.17.50.0.6-5.fc6.src.rpm
209648f0924f54fff1c85982211dcf77a7b43a97 ppc/debug/binutils-debuginfo-2.17.50.0.6-5.fc6.ppc.rpm
7325c45d059a48ed36ae541f85ead87b5fe7ce62 ppc/binutils-devel-2.17.50.0.6-5.fc6.ppc.rpm
c5e9bcba9601485c19b23e775f1560c6284104ba ppc/binutils-2.17.50.0.6-5.fc6.ppc.rpm
944195df9c51762c064a90fb50c831393ab68f18 x86_64/binutils-devel-2.17.50.0.6-5.fc6.x86_64.rpm
3bc0227f8c0163b8d96e833f8b9a75e4af52f107 x86_64/binutils-2.17.50.0.6-5.fc6.x86_64.rpm
847df89b79d683c1691b5b4862f6303d9990a76c x86_64/debug/binutils-debuginfo-2.17.50.0.6-5.fc6.x86_64.rpm
8d4059e9ca4a85afbc47a1779ed4683736c2c2d3 i386/debug/binutils-debuginfo-2.17.50.0.6-5.fc6.i386.rpm
c4aa54e6827b5084217a5b3c056c0a741dbb9c00 i386/binutils-devel-2.17.50.0.6-5.fc6.i386.rpm
50f3bc44e1b236c16449760ba6c6b0bc209dd1a3 i386/binutils-2.17.50.0.6-5.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
16 years, 9 months