RHSA-2004:653Medium

Red Hat Security Advisory: apache, mod_ssl security update for Stronghold

Published
December 20, 2004
Last Modified
June 28, 2026

🔗 CVE IDs covered (3)

CVE-2003-0987 →CVE-2004-0885 →CVE-2004-0940 →

📋 Description

CVE-2003-0987 — httpd mod_digest nonce not verified CVE-2004-0885 — mod_ssl SSLCipherSuite bypass CVE-2004-0940 — httpd mod_include SSI overflow

🎯 Affected products1

  • Red Hat Stronghold 4

✅ Remediation

Updated Stronghold 4 packages are now available via the update agent service. Run the following command from the Stronghold 4 install root to upgrade an existing Stronghold 4 installation to the new package versions: $ bin/agent The Stronghold 4.0j patch release which contains these updated packages is also available from the download site. After upgrading Stronghold, the server must be completely restarted by running the following commands from the install root: $ bin/stop-server $ bin/start-server For more information on how to upgrade between releases of Stronghold 4, refer to http://stronghold.redhat.com/support/upgrade-sh4

🔗 References (4)