Format: 1.7 Date: Thu, 01 Sep 2011 01:53:46 -0700 Source: apache2 Binary: apache2.2-common apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-mpm-perchild apache2-utils apache2 apache2-doc apache2-prefork-dev apache2-threaded-dev apache2-src apache2-dbg Architecture: hppa Version: 2.2.8-1ubuntu0.21 Distribution: hardy Urgency: low Maintainer: Ubuntu/hppa Build Daemon Changed-By: Steve Beattie Description: apache2 - Next generation, scalable, extendable web server apache2-dbg - Apache debugging symbols apache2-doc - documentation for apache2 apache2-mpm-event - Event driven model for Apache HTTPD apache2-mpm-perchild - Transitional package - please remove apache2-mpm-prefork - Traditional model for Apache HTTPD apache2-mpm-worker - High speed threaded model for Apache HTTPD apache2-prefork-dev - development headers for apache2 apache2-src - Apache source code apache2-threaded-dev - development headers for apache2 apache2-utils - utility programs for webservers apache2.2-common - Next generation, scalable, extendable web server Changes: apache2 (2.2.8-1ubuntu0.21) hardy-security; urgency=low . * SECURITY UPDATE: Range header DoS vulnerability * debian/patches/214_CVE-2011-3192.dpatch: filter out large byte ranges and improve memory efficiency in handling buckets. (thanks to Debian and upstream) * CVE-2011-3192 * Include fix for regressions introduced by above patch: - debian/patches/084_CVE-2011-3192_regression.dpatch: return 206 and 416 response codes where appropriate (see deban bug 639825) Files: 4b71f7f1458bef5004a0c764ce76eab5 873938 web optional apache2.2-common_2.2.8-1ubuntu0.21_hppa.deb 0d43950cc06ed63b53bf92437f0cd591 244968 web optional apache2-mpm-worker_2.2.8-1ubuntu0.21_hppa.deb 16fde55655b7d8dd308bff37428f699b 240396 web optional apache2-mpm-prefork_2.2.8-1ubuntu0.21_hppa.deb 7ba4568fb35f9194ad53c94bd5437b63 245516 web optional apache2-mpm-event_2.2.8-1ubuntu0.21_hppa.deb 671083b0583da21b25119b89952196b2 150798 web optional apache2-utils_2.2.8-1ubuntu0.21_hppa.deb c7b10893394c86bd0e77d5610e3c1b75 206426 devel extra apache2-prefork-dev_2.2.8-1ubuntu0.21_hppa.deb 31e05d2320cb430b681213759754f5cc 207192 devel extra apache2-threaded-dev_2.2.8-1ubuntu0.21_hppa.deb Original-Maintainer: Debian Apache Maintainers