apache2 (2.0.55-4ubuntu2.13) dapper-security; urgency=low
* SECURITY UPDATE: denial of service in apr_fnmatch exploitable via
apache's mod_index
- debian/patches/122_fnmatch_CVE-2011-0419.patch: rewrite
apr_fnmatch to have a better time bounds on execution.
- CVE-2011-0419
- debian/patches/123_fnmatch_CVE-2011-1928.patch: fix possible
DoS introduced by patch for CVE-2011-0419.
- CVE-2011-1928
Date: Sun, 22 May 2011 21:17:32 -0700
Changed-By: Steve Beattie <[email protected]>
Maintainer: Debian Apache Maintainers <[email protected]>
https://launchpad.net/ubuntu/dapper/+source/apache2/2.0.55-4ubuntu2.13
Format: 1.7
Date: Sun, 22 May 2011 21:17:32 -0700
Source: apache2
Binary: apache2-utils apache2 apache2-prefork-dev apache2-mpm-prefork
apache2-doc libapr0-dev apache2-mpm-worker libapr0 apache2-threaded-dev
apache2-common apache2-mpm-perchild
Architecture: source
Version: 2.0.55-4ubuntu2.13
Distribution: dapper-security
Urgency: low
Maintainer: Debian Apache Maintainers <[email protected]>
Changed-By: Steve Beattie <[email protected]>
Description:
apache2 - next generation, scalable, extendable web server
apache2-common - next generation, scalable, extendable web server
apache2-doc - documentation for apache2
apache2-mpm-perchild - experimental high speed perchild threaded model for
Apache2
apache2-mpm-prefork - traditional model for Apache2
apache2-mpm-worker - high speed threaded model for Apache2
apache2-prefork-dev - development headers for apache2
apache2-threaded-dev - development headers for apache2
apache2-utils - utility programs for webservers
libapr0 - the Apache Portable Runtime
libapr0-dev - development headers for libapr
Changes:
apache2 (2.0.55-4ubuntu2.13) dapper-security; urgency=low
.
* SECURITY UPDATE: denial of service in apr_fnmatch exploitable via
apache's mod_index
- debian/patches/122_fnmatch_CVE-2011-0419.patch: rewrite
apr_fnmatch to have a better time bounds on execution.
- CVE-2011-0419
- debian/patches/123_fnmatch_CVE-2011-1928.patch: fix possible
DoS introduced by patch for CVE-2011-0419.
- CVE-2011-1928
Files:
c83b6a6795065c007da7a1764347bf3d 1823 net optional
apache2_2.0.55-4ubuntu2.13.dsc
e1bed19dc3827f4e375d1fbb87693cbf 141485 net optional
apache2_2.0.55-4ubuntu2.13.diff.gz
--
dapper-changes mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/dapper-changes
