-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Wed, 15 Aug 2007 15:32:31 -0700 Source: apache2 Binary: apache2-utils apache2 apache2-prefork-dev apache2-mpm-prefork apache2-doc libapr0-dev apache2-mpm-worker libapr0 apache2-threaded-dev apache2-common apache2-mpm-perchild Architecture: hppa Version: 2.0.55-4ubuntu2.2 Distribution: dapper-security Urgency: low Maintainer: Ubuntu/hppa Build Daemon Changed-By: Kees Cook Description: apache2 - next generation, scalable, extendable web server apache2-common - next generation, scalable, extendable web server apache2-mpm-perchild - experimental high speed perchild threaded model for Apache2 apache2-mpm-prefork - traditional model for Apache2 apache2-mpm-worker - high speed threaded model for Apache2 apache2-prefork-dev - development headers for apache2 apache2-threaded-dev - development headers for apache2 apache2-utils - utility programs for webservers libapr0 - the Apache Portable Runtime libapr0-dev - development headers for libapr Changes: apache2 (2.0.55-4ubuntu2.2) dapper-security; urgency=low . * SECURITY UPDATE: XSS in mod_status, bad signal passing. * Backported fixes from upstream: - CVE-2007-3304: stop signals from being sent to other processes. http://svn.apache.org/viewvc?view=rev&revision=547987 - CVE-2006-5752: fixed XSS in status report. http://svn.apache.org/viewvc?view=rev&revision=549159 Files: 88d593cc1037c0dcef859959157c9903 883426 net optional apache2-common_2.0.55-4ubuntu2.2_hppa.deb 5004f732f707152eb4f92aad3d2dc16f 100826 net optional apache2-utils_2.0.55-4ubuntu2.2_hppa.deb eaec38e39b7f1ebcb844120e24e09888 236358 net optional apache2-mpm-worker_2.0.55-4ubuntu2.2_hppa.deb ba655738b83b249d935126c24fde1ec0 236960 net optional apache2-mpm-perchild_2.0.55-4ubuntu2.2_hppa.deb 7e4d457f1d3274c873600c7cd998db10 231808 net optional apache2-mpm-prefork_2.0.55-4ubuntu2.2_hppa.deb f8252ddc76f6dec23b8b80a1b5d9c4e8 171096 devel optional apache2-prefork-dev_2.0.55-4ubuntu2.2_hppa.deb 57a24b56b848369229dfa5b03b64ca64 171878 devel optional apache2-threaded-dev_2.0.55-4ubuntu2.2_hppa.deb 98529d4b174f3f8b38379dff9490f5cd 154390 net optional libapr0_2.0.55-4ubuntu2.2_hppa.deb 15592588123c3ef22b900d30eca3e2fc 296512 libdevel optional libapr0-dev_2.0.55-4ubuntu2.2_hppa.deb fc3df793fcf7a687ad53d6b4b54f3f1a 35910 web optional apache2_2.0.55-4ubuntu2.2_hppa.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (GNU/Linux) iD8DBQFGxNcO0N0xjzyQZEIRAobKAJ4yl9fC+zisLM2F6CFgmM/5eNywcQCfdWjO 8TsFmMQ0NXDHMFqDAn7oOI4= =P3P2 -----END PGP SIGNATURE-----