[Aurora-sparc-security] [SECURITY] security update apache-1.3.27-4

[Ingo T. Storm]

2004-01-07

The Aurora SPARC Linux Project is releasing

apache-1.3.27-4

as a security update to fix a local vulnerability. The exploit
requires write access to httpd.conf or .htaccess.

Please see http://www.auroralinux.org/errata/ for details
(most rpm entries there are linked to the original
Advisories from Red Hat (Thanks, Red Hat!). Some are link
to the (primary) Aurora Bugzilla bug ID that is fixed by
this rpm.

All updates are available from

Main Site (with limited bandwith):

ftp://auroralinux.org/pub/aurora/updates/1.0/
http://auroralinux.org/pub/aurora/updates/1.0/
rsync://auroralinux.org/auroralinux/updates/1.0/

Mirror in Australia:

http://planetmirror.com/pub/aurora/updates/1.0/
ftp://ftp.planetmirror.com/pub/aurora/updates/1.0/

NEW: Mirror in Europe (very fast, syncs frequently):

ftp://ftp-stud.fht-esslingen.de/Mirrors/ftp.auroralinux.org/updates/1.
0/
rsync://ftp-stud.fht-esslingen.de::auroralinux/updates/1.0/

Mirrors in the USA:

ftp://kickstart.linux.ncsu.edu/pub/aurora/updates/1.0/
ftp://angus.ind.wpi.edu/pub/mirrors/aurora/updates/1.0/

Regards,
Ingo T. Storm
Aurora SPARC Linux Project

MD5SUM                            File
-------------------------------------------------------------
837c8cc30cf30ab41dff5173c84ee871  apache-1.3.27-4.src.rpm
056e2bedc7fb8a85f1899f44d0566ae3  apache-1.3.27-4.sparc.rpm
d4c678e8dedc732c7214c6ad939312dc  apache-devel-1.3.27-4.sparc.rpm
732abe9ddcf8edb9e34f0eaac02eb026  apache-manual-1.3.27-4.sparc.rpm