Topic: Apache Vulnerability

[Dan Williamson]

Hi Folks,

Can I simply update my Apache with the RedHat 7.2 RPM fixes that correct the recent vulnerability?

RedHat issued patched versions of Apache 1.3.22-6 to correct a DoS vulnerability (http://rhn.redhat.com/errata/RHSA-2002-103.html) for RH 7.2 as well as other versions for 6.2,7.0,7.1,7.3 etc.

Is it necessary to have an es module update or an es specific patch?

I'd like to fix this as soon as possible as there are rumours of a possible overwrite condition that may compromise some systems.

regards,

Dan

[Dan Williamson]

Just a note, this issue has replies in the experienced user phorum if you are curious.