httpd-2.2.15-30.0.1.AXS4

エラータID: AXSA:2014-282:01

Release date: 
Friday, April 25, 2014 - 15:45
Subject: 
httpd-2.2.15-30.0.1.AXS4
Affected Channels: 
Asianux Server 4 for x86
Asianux Server 4 for x86_64
Severity: 
High
Description: 

The Apache HTTP Server is a powerful, efficient, and extensible web server.

Security issues fixed with this release:

• CVE-2013-6438
The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a denial of service (daemon crash) via a crafted DAV WRITE request.

• CVE-2014-0098
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.

Solution: 

Update packages.

CVEs: 




Additional Info: 

N/A

Download: 

SRPMS
  1. httpd-2.2.15-30.0.1.AXS4.src.rpm
    MD5: c4e3a33a4e9f9d58766de67bd0a10fe7
    SHA-256: 48d2210f10988ea8d8248ef4e51b7654574353462d4ce7dcdc5edd0e9f0e7aae
    Size: 6.39 MB

Asianux Server 4 for x86
  1. httpd-2.2.15-30.0.1.AXS4.i686.rpm
    MD5: 657d1a4a4a04f18acc8285b788c78a15
    SHA-256: b1385cad9e64f9089a139b11f52cf8eb01226ac1cee309c85173b55f27505d23
    Size: 826.18 kB
  2. httpd-devel-2.2.15-30.0.1.AXS4.i686.rpm
    MD5: afadacd7b728e521ce4f195591bc8e24
    SHA-256: 6da7e8890aa2a0ffdca766723d889f7e7da50a8d4667ca3b7015ac6328cc1c7a
    Size: 149.86 kB
  3. httpd-manual-2.2.15-30.0.1.AXS4.noarch.rpm
    MD5: 17c6d4f83dd0f01ab02b7c1d0e6c988d
    SHA-256: 2e506ee3ae819af42b0be7ddc73ed4a99e2956cea93a2694f4315a3805fa41ce
    Size: 783.23 kB
  4. httpd-tools-2.2.15-30.0.1.AXS4.i686.rpm
    MD5: c357563be34bf3d785ac404cbc31b606
    SHA-256: d732eab8da8f1963488cff935244bdb1e966e2e4f47cf12940aecd51f35a186c
    Size: 73.14 kB
  5. mod_ssl-2.2.15-30.0.1.AXS4.i686.rpm
    MD5: ae88e3109a542373df8b3dafe23a9795
    SHA-256: d79d704d776a4e8a4db5c0e8feea05ad6f14df5b39e4b1a33e0bf3408a3d68de
    Size: 91.07 kB

Asianux Server 4 for x86_64
  1. httpd-2.2.15-30.0.1.AXS4.x86_64.rpm
    MD5: 9d0365b95822e0d8715e5b6fd55d6d2e
    SHA-256: 7d9fec50fbb0d434cc84f86d2041cfa3fd23226bf2c25591f9ec77d0f77c1ea8
    Size: 820.99 kB
  2. httpd-devel-2.2.15-30.0.1.AXS4.x86_64.rpm
    MD5: fcf85814566786a1a6904e7e15338e77
    SHA-256: 4a1220126deb0508ae9f8a0caf99d6dcfe5d586dffb5dc7ab9a0186f28d35e26
    Size: 149.39 kB
  3. httpd-manual-2.2.15-30.0.1.AXS4.noarch.rpm
    MD5: 9b8c0c27a826185609e8c5ef1b3bb43a
    SHA-256: caefb84a1d246b2d5d3dc0cc09a583ed9d79b7fcaf231f0baa32153b59da28e6
    Size: 782.71 kB
  4. httpd-tools-2.2.15-30.0.1.AXS4.x86_64.rpm
    MD5: cf53e5703be71e7be2b4fca3a18d0b16
    SHA-256: ee8859fd16d43df08b625a32b709d9474fd09cb699679115127c8256126647a0
    Size: 72.08 kB
  5. mod_ssl-2.2.15-30.0.1.AXS4.x86_64.rpm
    MD5: 0da577f071dcbf1226caf6a1c3371944
    SHA-256: fb8de2d5f74caf669ab1b7d99c0bc20f63e2265741ffefd7397196431e526c88
    Size: 89.64 kB
  6. httpd-devel-2.2.15-30.0.1.AXS4.i686.rpm
    MD5: afadacd7b728e521ce4f195591bc8e24
    SHA-256: 6da7e8890aa2a0ffdca766723d889f7e7da50a8d4667ca3b7015ac6328cc1c7a
    Size: 149.86 kB