apache2 2.2.16-6+squeeze10 source package in Debian

Changelog

apache2 (2.2.16-6+squeeze10) squeeze-security; urgency=low


  [ Arno Töll ]
  * Backport disable-ssl-compression.patch from Wheezy. This patch disabled
    SSL compression upon request by introducing a "Compression on|off"
    directive to mod_ssl. This is to mitigate impact of CRIME attacks to SSL -
    which is a browser issue, however.
    See also Debian bug #674142 and #689936.

  [ Stefan Fritsch ]
  * CVE-2012-4557: mod_proxy_ajp: Remote denial of service (temporary, until
    mod_proxy_ajp's retry timeout expired).

 -- Stefan Fritsch <email address hidden>  Fri, 30 Nov 2012 09:26:36 +0100