Advisories MDKSA-2007:127: Updated apache packages fix mod_mem_cache issue

[paul]

The recall_headers function in mod_mem_cache in Apache 2.2.4 does not

properly copy all levels of header data, which can cause Apache to

return HTTP headers containing previously-used data, which could be

used to obtain potentially sensitive information by unauthorized users.

 

Updated packages have been patched to prevent this issue.