[BSA-049] Security Update for apache2

2011-09-0602:06:51

lists.debian.org

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

8.1 High

AI Score

Confidence

High

0.963 High

EPSS

Percentile

99.6%

JSON

Andres Salomon uploaded new packages for apache2 which fixed the
following security problems:

CVE-2011-3192
DoS by high memory usage for a large number of overlapping
ranges.

For the lenny-backports distribution the problems have been fixed in
version 2.2.16-6+squeeze3~bpo50+1.

For the stable distribution (squeeze), this problem has been fixed in
version 2.2.16-6+squeeze3.
Attachment:
signature.asc
Description: PGP signature

OSVersionArchitecturePackageVersionFilename
Debian6armelapache2-mpm-event< 2.2.16-6+squeeze3apache2-mpm-event_2.2.16-6+squeeze3_armel.deb
Debian6i386apache2< 2.2.16-6+squeeze3apache2_2.2.16-6+squeeze3_i386.deb
Debian6s390apache2-utils< 2.2.16-6+squeeze3apache2-utils_2.2.16-6+squeeze3_s390.deb
Debian6s390apache2-prefork-dev< 2.2.16-6+squeeze3apache2-prefork-dev_2.2.16-6+squeeze3_s390.deb
Debian6allapache2< 2.2.16-6+squeeze3apache2_2.2.16-6+squeeze3_all.deb
Debian6i386apache2-mpm-prefork< 2.2.16-6+squeeze3apache2-mpm-prefork_2.2.16-6+squeeze3_i386.deb
Debian6mipselapache2-prefork-dev< 2.2.16-6+squeeze3apache2-prefork-dev_2.2.16-6+squeeze3_mipsel.deb
Debian6powerpcapache2< 2.2.16-6+squeeze3apache2_2.2.16-6+squeeze3_powerpc.deb
Debian6mipsapache2.2-bin< 2.2.16-6+squeeze3apache2.2-bin_2.2.16-6+squeeze3_mips.deb
Debian6ia64apache2-mpm-prefork< 2.2.16-6+squeeze3apache2-mpm-prefork_2.2.16-6+squeeze3_ia64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	armel	apache2-mpm-event	< 2.2.16-6+squeeze3	apache2-mpm-event_2.2.16-6+squeeze3_armel.deb
Debian	6	i386	apache2	< 2.2.16-6+squeeze3	apache2_2.2.16-6+squeeze3_i386.deb
Debian	6	s390	apache2-utils	< 2.2.16-6+squeeze3	apache2-utils_2.2.16-6+squeeze3_s390.deb
Debian	6	s390	apache2-prefork-dev	< 2.2.16-6+squeeze3	apache2-prefork-dev_2.2.16-6+squeeze3_s390.deb
Debian	6	all	apache2	< 2.2.16-6+squeeze3	apache2_2.2.16-6+squeeze3_all.deb
Debian	6	i386	apache2-mpm-prefork	< 2.2.16-6+squeeze3	apache2-mpm-prefork_2.2.16-6+squeeze3_i386.deb
Debian	6	mipsel	apache2-prefork-dev	< 2.2.16-6+squeeze3	apache2-prefork-dev_2.2.16-6+squeeze3_mipsel.deb
Debian	6	powerpc	apache2	< 2.2.16-6+squeeze3	apache2_2.2.16-6+squeeze3_powerpc.deb
Debian	6	mips	apache2.2-bin	< 2.2.16-6+squeeze3	apache2.2-bin_2.2.16-6+squeeze3_mips.deb
Debian	6	ia64	apache2-mpm-prefork	< 2.2.16-6+squeeze3	apache2-mpm-prefork_2.2.16-6+squeeze3_ia64.deb