RHSA-2004:600Medium
Red Hat Security Advisory: apache, mod_ssl security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2003-0987 — httpd mod_digest nonce not verified CVE-2004-0885 — mod_ssl SSLCipherSuite bypass CVE-2004-0940 — httpd mod_include SSI overflow
🎯 Affected products4
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1
- Red Hat Enterprise Linux ES version 2.1
- Red Hat Enterprise Linux WS version 2.1
- Red Hat Linux Advanced Workstation 2.1
✅ Remediation
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2004:600
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=131360
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=134826
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=137417
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=137419
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_600.json