Ubuntu
libapache-mod-security package

libapache-mod-security 2.5.11-1ubuntu0.1 source package in Ubuntu

Changelog

libapache-mod-security (2.5.11-1ubuntu0.1) lucid-security; urgency=low

  * SECURITY UPDATE: bypass multipart filtering using invalid quoting
    (LP: #1016909)
    - debian/patches/CVE-2012-2751: Fix detection of invalid
      quotes. Thanks to Alberto Gonzalez Iniesta for the backported patch
    - Patch taken from Oneiric package
    - CVE-2012-2751
  * SECURITY UPDATE: disclosure of local files or denial of service by
    resource exhaustion via XML External Entity (XEE) attacks
    (LP: #1169030)
    - debian/patches/CVE-2013-1915.patch: Add an option to allow loading
      external entities (disabled by default). Backported from upstream
      patch
    - d4d80b38aa85eccb26e3c61b04d16e8ca5de76fe
    - CVE-2013-1915
 -- Evan Broder <email address hidden>   Tue, 16 Apr 2013 09:05:37 -0700

Upload details

Uploaded by:
Evan Broder
Sponsored by:
Seth Arnold
Uploaded to:
Lucid
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
httpd
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libapache-mod-security_2.5.11.orig.tar.gz 1.3 MiB fd81a8998327ef2010426fcc2899312eddfe4dc462c417e9e7aeb64a6d4ed2bf
libapache-mod-security_2.5.11-1ubuntu0.1.diff.gz 9.3 KiB 2811b8e129e3bf5757f2de409b2ed9fe420f5cfc201b4353d24e705902de15c2
libapache-mod-security_2.5.11-1ubuntu0.1.dsc 1.6 KiB ef6329a2a05e09b453bc35a99aee0f04d3bb04c505cc2fe795d92010979af56c

View changes file

Binary packages built by this source

libapache-mod-security: No summary available for libapache-mod-security in ubuntu lucid.

No description available for libapache-mod-security in ubuntu lucid.

mod-security-common: No summary available for mod-security-common in ubuntu lucid.

No description available for mod-security-common in ubuntu lucid.