httpd-2.2.15-9.2.0.1.AXS4

The Apache HTTP Server is a powerful, efficient, and extensible web server.
Security issues fixed with this release:
CVE-2011-3192
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
Fixed bugs:
- mod_ssl: complete fix for overlapping memcpy
- mod_ssl: fix compat with FIPS-enabled OpenSSL
- mod_ldap: fix caching with per-vhost directive use
- mod_ssl: fix startup with duplicate SSL vhost configurations
- prefork: ensure early child exit during graceful restart
- ab: fail gracefully for OOM allocating stats structures
- init script: use $STOP_DELAY as delay before SIGKILL of parent
- stop multiple invocations of filter init functions
- mod_ssl: avoid overlapping memcpy
- mark httpd.conf as noreplace