[BSA-058] Security Update for apache2

2011-11-1404:20:22

lists.debian.org

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

High

0.248 Low

EPSS

Percentile

96.7%

JSON

Andres Salomon uploaded new packages for apache2 which fixed the
following security problems:

CVE-2011-3348
Possible denial of service in mod_proxy_ajp if combined with
mod_proxy_balancer.

For the lenny-backports distribution the problem has been fixed in
version 2.2.16-6+squeeze4~bpo50+1.

For the stable distribution (squeeze), this problem has been fixed in
version 2.2.16-6+squeeze4.
Attachment:
signature.asc
Description: PGP signature

OSVersionArchitecturePackageVersionFilename
Debian6ia64apache2-mpm-prefork< 2.2.16-6+squeeze4apache2-mpm-prefork_2.2.16-6+squeeze4_ia64.deb
Debian6s390apache2.2-common< 2.2.16-6+squeeze4apache2.2-common_2.2.16-6+squeeze4_s390.deb
Debian6kfreebsd-i386apache2-mpm-itk< 2.2.16-6+squeeze4apache2-mpm-itk_2.2.16-6+squeeze4_kfreebsd-i386.deb
Debian6kfreebsd-amd64apache2-mpm-itk< 2.2.16-6+squeeze4apache2-mpm-itk_2.2.16-6+squeeze4_kfreebsd-amd64.deb
Debian6mipselapache2-utils< 2.2.16-6+squeeze4apache2-utils_2.2.16-6+squeeze4_mipsel.deb
Debian6armelapache2-threaded-dev< 2.2.16-6+squeeze4apache2-threaded-dev_2.2.16-6+squeeze4_armel.deb
Debian6i386apache2.2-bin< 2.2.16-6+squeeze4apache2.2-bin_2.2.16-6+squeeze4_i386.deb
Debian6kfreebsd-amd64apache2-suexec< 2.2.16-6+squeeze4apache2-suexec_2.2.16-6+squeeze4_kfreebsd-amd64.deb
Debian6kfreebsd-amd64apache2-suexec-custom< 2.2.16-6+squeeze4apache2-suexec-custom_2.2.16-6+squeeze4_kfreebsd-amd64.deb
Debian6ia64apache2-mpm-event< 2.2.16-6+squeeze4apache2-mpm-event_2.2.16-6+squeeze4_ia64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	ia64	apache2-mpm-prefork	< 2.2.16-6+squeeze4	apache2-mpm-prefork_2.2.16-6+squeeze4_ia64.deb
Debian	6	s390	apache2.2-common	< 2.2.16-6+squeeze4	apache2.2-common_2.2.16-6+squeeze4_s390.deb
Debian	6	kfreebsd-i386	apache2-mpm-itk	< 2.2.16-6+squeeze4	apache2-mpm-itk_2.2.16-6+squeeze4_kfreebsd-i386.deb
Debian	6	kfreebsd-amd64	apache2-mpm-itk	< 2.2.16-6+squeeze4	apache2-mpm-itk_2.2.16-6+squeeze4_kfreebsd-amd64.deb
Debian	6	mipsel	apache2-utils	< 2.2.16-6+squeeze4	apache2-utils_2.2.16-6+squeeze4_mipsel.deb
Debian	6	armel	apache2-threaded-dev	< 2.2.16-6+squeeze4	apache2-threaded-dev_2.2.16-6+squeeze4_armel.deb
Debian	6	i386	apache2.2-bin	< 2.2.16-6+squeeze4	apache2.2-bin_2.2.16-6+squeeze4_i386.deb
Debian	6	kfreebsd-amd64	apache2-suexec	< 2.2.16-6+squeeze4	apache2-suexec_2.2.16-6+squeeze4_kfreebsd-amd64.deb
Debian	6	kfreebsd-amd64	apache2-suexec-custom	< 2.2.16-6+squeeze4	apache2-suexec-custom_2.2.16-6+squeeze4_kfreebsd-amd64.deb
Debian	6	ia64	apache2-mpm-event	< 2.2.16-6+squeeze4	apache2-mpm-event_2.2.16-6+squeeze4_ia64.deb