Format: 1.8 Date: Tue, 06 Nov 2012 14:22:46 -0500 Source: apache2 Binary: apache2.2-common apache2.2-bin apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-mpm-itk apache2-utils apache2-suexec apache2-suexec-custom apache2 apache2-doc apache2-prefork-dev apache2-threaded-dev apache2-dbg Architecture: amd64 Version: 2.2.22-6ubuntu2.1 Distribution: quantal Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: apache2 - Apache HTTP Server metapackage apache2-dbg - Apache debugging symbols apache2-doc - Apache HTTP Server documentation apache2-mpm-event - Apache HTTP Server - event driven model apache2-mpm-itk - multiuser MPM for Apache 2.2 apache2-mpm-prefork - Apache HTTP Server - traditional non-threaded model apache2-mpm-worker - Apache HTTP Server - high speed threaded model apache2-prefork-dev - Apache development headers - non-threaded MPM apache2-suexec - Standard suexec program for Apache 2 mod_suexec apache2-suexec-custom - Configurable suexec program for Apache 2 mod_suexec apache2-threaded-dev - Apache development headers - threaded MPM apache2-utils - utility programs for webservers apache2.2-bin - Apache HTTP Server common binary files apache2.2-common - Apache HTTP Server common files Launchpad-Bugs-Fixed: 1068854 Changes: apache2 (2.2.22-6ubuntu2.1) quantal-security; urgency=low . * SECURITY UPDATE: XSS vulnerability in mod_negotiation - debian/patches/CVE-2012-2687.patch: escape filenames in modules/mappers/mod_negotiation.c. - CVE-2012-2687 * SECURITY UPDATE: CRIME attack ssl attack (LP: #1068854) - debian/patches/CVE-2012-4929.patch: backport SSLCompression on|off directive. Defaults to off as enabling compression enables the CRIME attack. - CVE-2012-4929 Checksums-Sha1: a4b6335f9f8fe4fb689783bf9a18056a1a9745c6 226720 apache2.2-common_2.2.22-6ubuntu2.1_amd64.deb c45a9df35d5c9aa5fda21a3a6c5e625ae2fba48a 3124100 apache2.2-bin_2.2.22-6ubuntu2.1_amd64.deb 5817dc7cc4b25eb046e488e56f6a5024bc4ec88c 2246 apache2-mpm-worker_2.2.22-6ubuntu2.1_amd64.deb 4a11f7e9ea95e5b6f86bc780af0a78df678ea6c9 2360 apache2-mpm-prefork_2.2.22-6ubuntu2.1_amd64.deb 49e0ec3781ec56ad047af23da84b4e2005e3a96a 2312 apache2-mpm-event_2.2.22-6ubuntu2.1_amd64.deb aa35ae3d882a3022587f631a08f0aed8734d0319 2336 apache2-mpm-itk_2.2.22-6ubuntu2.1_amd64.deb 70568d9e236ccc852d6ba10f9b40d4ef3af8424d 90018 apache2-utils_2.2.22-6ubuntu2.1_amd64.deb f260a344a9d739715f7684536d8ddf6aadf52850 15430 apache2-suexec_2.2.22-6ubuntu2.1_amd64.deb 1ec32a5cefabd6041e5fe03e64450c731f87fe8d 17164 apache2-suexec-custom_2.2.22-6ubuntu2.1_amd64.deb 7735545f79b23b844183aba379dc9c6e351e2200 1446 apache2_2.2.22-6ubuntu2.1_amd64.deb eb75467dded18f91fb621d7154b409044b0a333e 137674 apache2-prefork-dev_2.2.22-6ubuntu2.1_amd64.deb 53abb1ef5a4fc9ea411b8d9cab975927061d4982 138828 apache2-threaded-dev_2.2.22-6ubuntu2.1_amd64.deb Checksums-Sha256: 7b0cddcaef93886aa1909426825c7ee6ebd730320791316c8b564f77557192ce 226720 apache2.2-common_2.2.22-6ubuntu2.1_amd64.deb 6e60386f5a4aa4f8c7cda3b763c78037328e3908c47f76e51b45c6d1bfc5ca35 3124100 apache2.2-bin_2.2.22-6ubuntu2.1_amd64.deb 788b4db2deb637ed91c506ca401eaac65ff5bce94a9194188892c06c7a099719 2246 apache2-mpm-worker_2.2.22-6ubuntu2.1_amd64.deb 059eb485ae8cd3534429ca652c9910b01d75e42e41d20267c66f3ef5fa3f4dc3 2360 apache2-mpm-prefork_2.2.22-6ubuntu2.1_amd64.deb 6f97f909f3cfe275bbb3544b93b028a97523fb639fac247c3897b807a4ce1f16 2312 apache2-mpm-event_2.2.22-6ubuntu2.1_amd64.deb de8f63a6b5f19af10e8e2a8f71e78a50211025338c5f2680904fb9a1fb640447 2336 apache2-mpm-itk_2.2.22-6ubuntu2.1_amd64.deb 42c65c3a98f3a844fecee4c655c6ac268b33598d0cfdfe84d9dc4b9dc2b06896 90018 apache2-utils_2.2.22-6ubuntu2.1_amd64.deb ea0e6ddad423a6f8891e06802f7912a8e229a8dc8def0f5a7af737dcccd0776c 15430 apache2-suexec_2.2.22-6ubuntu2.1_amd64.deb b8bab44a37c4eb94716babce567c5cc66486319915ac96e569a71d69953fab6a 17164 apache2-suexec-custom_2.2.22-6ubuntu2.1_amd64.deb e5d66a049050a268b04065b7211585af6f108ed80a73fb8f1af5f8d9245996fc 1446 apache2_2.2.22-6ubuntu2.1_amd64.deb 68643ee14cc6fc0f0b4353797e30b07a1cb90660f88fcfdcb6c36869700e630e 137674 apache2-prefork-dev_2.2.22-6ubuntu2.1_amd64.deb 6d8278e2ea37cfb11a4a69a51611263659ebc8ea6fa72c9cb1d812e0e113780f 138828 apache2-threaded-dev_2.2.22-6ubuntu2.1_amd64.deb Files: 4a60862485a3601e6c58270aec8685fb 226720 httpd optional apache2.2-common_2.2.22-6ubuntu2.1_amd64.deb 8919d3ae65e9f6cb8e30d51e3db7aa47 3124100 httpd optional apache2.2-bin_2.2.22-6ubuntu2.1_amd64.deb 3114598fe35ebf32d3af811a966347c0 2246 httpd optional apache2-mpm-worker_2.2.22-6ubuntu2.1_amd64.deb 6a264b52985c84a35e17353a2c22248e 2360 httpd optional apache2-mpm-prefork_2.2.22-6ubuntu2.1_amd64.deb 6608ebc176cfb570e82f21347d0d2fba 2312 httpd optional apache2-mpm-event_2.2.22-6ubuntu2.1_amd64.deb 5b88afb5a4313f085615cc43a78dc1dd 2336 httpd extra apache2-mpm-itk_2.2.22-6ubuntu2.1_amd64.deb 578d25c86376355625e1c4033ccee6db 90018 httpd optional apache2-utils_2.2.22-6ubuntu2.1_amd64.deb 7c05e93d74e0c99eeb175623b7e0d313 15430 httpd optional apache2-suexec_2.2.22-6ubuntu2.1_amd64.deb 932688bca011c98df10326e1ad7b9f8e 17164 httpd extra apache2-suexec-custom_2.2.22-6ubuntu2.1_amd64.deb e9f92223ed72010ec61075df41e7d482 1446 httpd optional apache2_2.2.22-6ubuntu2.1_amd64.deb 6d00c7c01c9e6783a029da408e333018 137674 httpd extra apache2-prefork-dev_2.2.22-6ubuntu2.1_amd64.deb b1df08e3d1e067fcae26f74f82fd36bd 138828 httpd extra apache2-threaded-dev_2.2.22-6ubuntu2.1_amd64.deb Original-Maintainer: Debian Apache Maintainers