Format: 1.8 Date: Tue, 06 Nov 2012 14:22:46 -0500 Source: apache2 Binary: apache2.2-common apache2.2-bin apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-mpm-itk apache2-utils apache2-suexec apache2-suexec-custom apache2 apache2-doc apache2-prefork-dev apache2-threaded-dev apache2-dbg Architecture: i386 all Version: 2.2.22-6ubuntu2.1 Distribution: quantal Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: apache2 - Apache HTTP Server metapackage apache2-dbg - Apache debugging symbols apache2-doc - Apache HTTP Server documentation apache2-mpm-event - Apache HTTP Server - event driven model apache2-mpm-itk - multiuser MPM for Apache 2.2 apache2-mpm-prefork - Apache HTTP Server - traditional non-threaded model apache2-mpm-worker - Apache HTTP Server - high speed threaded model apache2-prefork-dev - Apache development headers - non-threaded MPM apache2-suexec - Standard suexec program for Apache 2 mod_suexec apache2-suexec-custom - Configurable suexec program for Apache 2 mod_suexec apache2-threaded-dev - Apache development headers - threaded MPM apache2-utils - utility programs for webservers apache2.2-bin - Apache HTTP Server common binary files apache2.2-common - Apache HTTP Server common files Launchpad-Bugs-Fixed: 1068854 Changes: apache2 (2.2.22-6ubuntu2.1) quantal-security; urgency=low . * SECURITY UPDATE: XSS vulnerability in mod_negotiation - debian/patches/CVE-2012-2687.patch: escape filenames in modules/mappers/mod_negotiation.c. - CVE-2012-2687 * SECURITY UPDATE: CRIME attack ssl attack (LP: #1068854) - debian/patches/CVE-2012-4929.patch: backport SSLCompression on|off directive. Defaults to off as enabling compression enables the CRIME attack. - CVE-2012-4929 Checksums-Sha1: 86064dc50a7b1844915f5e8c5c034502c4488cae 227762 apache2.2-common_2.2.22-6ubuntu2.1_i386.deb e3f6d192995abf8b03055ed09af275a3dd6a0e3c 2987540 apache2.2-bin_2.2.22-6ubuntu2.1_i386.deb aa1c9547d0147f31f3b35d7ecd97b2d2652dfa37 2246 apache2-mpm-worker_2.2.22-6ubuntu2.1_i386.deb a2721522318fe557aac9fad1988f1d2a1d15aafc 2360 apache2-mpm-prefork_2.2.22-6ubuntu2.1_i386.deb 11c0514ec00ececc5d15dfbc14e9b7ee21f5f30f 2316 apache2-mpm-event_2.2.22-6ubuntu2.1_i386.deb 4a7c8652ca527314c5cdd3f7c103b3de267c4f0e 2346 apache2-mpm-itk_2.2.22-6ubuntu2.1_i386.deb f123f21fc3914bdc0585ebd43ddcb40082a54d68 91444 apache2-utils_2.2.22-6ubuntu2.1_i386.deb f84dc304d6f79093ecfd4c4c1231156a4793158d 15090 apache2-suexec_2.2.22-6ubuntu2.1_i386.deb a1c65374a31b5eb8f984439fd4cd07abce6ab71b 16880 apache2-suexec-custom_2.2.22-6ubuntu2.1_i386.deb 864c2089ba5663d7833aa7c690f1143c39a24fe9 1442 apache2_2.2.22-6ubuntu2.1_i386.deb e851b285c2d3d271c9047f3a67ebaae333d0d469 2614760 apache2-doc_2.2.22-6ubuntu2.1_all.deb 5f43aec0b4b44cdc7d17960dbf762741933a68e9 138068 apache2-prefork-dev_2.2.22-6ubuntu2.1_i386.deb 672c3e7eecfcd14aa207ef860f708f24902bb8e2 139238 apache2-threaded-dev_2.2.22-6ubuntu2.1_i386.deb Checksums-Sha256: ef603cda3c75dc8b49084d3bc77393ee20e0ac4e7403b90846a3dd18d9518102 227762 apache2.2-common_2.2.22-6ubuntu2.1_i386.deb ccdaa3ca436b983bcaac036558a531c7b395d1df4b323dc62eed7ab9a0285f4a 2987540 apache2.2-bin_2.2.22-6ubuntu2.1_i386.deb 7230b0c70b46dd6987ecc4755053c3cd0f660995c8d9bde680c77be796750f01 2246 apache2-mpm-worker_2.2.22-6ubuntu2.1_i386.deb 895c1271c7598e5ed4bb106897d266c0bada887c96b8b2ee4eb133173d1a424d 2360 apache2-mpm-prefork_2.2.22-6ubuntu2.1_i386.deb dbee847010ac88ba5980642b2417fa440835cac69aeb58afcd3a125a37f91d2c 2316 apache2-mpm-event_2.2.22-6ubuntu2.1_i386.deb 8c355a26c882d8bd4677ee9dacef08ab5426402f4d8ff32d7f01e2a51b81e78c 2346 apache2-mpm-itk_2.2.22-6ubuntu2.1_i386.deb 82c2b8f9444f1ee7438e5403042d2ae6d225ecf2964f8e7bcde860e2acfcf7ab 91444 apache2-utils_2.2.22-6ubuntu2.1_i386.deb bb74fedc1ff2f521b8870aa19d1a927d8a23aecf9c347dba535d54738daee237 15090 apache2-suexec_2.2.22-6ubuntu2.1_i386.deb 498c2cf3f8cd64bd94f3abd5f8ec6e649ba51f2b1a110303acc9cf29c4f7fee4 16880 apache2-suexec-custom_2.2.22-6ubuntu2.1_i386.deb d253ef82f3d4dfc1eda9c0c00dd46419102b1c6f6e69f3376596188911de73c4 1442 apache2_2.2.22-6ubuntu2.1_i386.deb 3cb4db1a2ce8a95e12c485d2b87c7265c03b43d0f2892d9c97d540123e812892 2614760 apache2-doc_2.2.22-6ubuntu2.1_all.deb f01a8f7d8213a7f1b943630d746f629a22aef4510f1760dcd80de92ac73f1f5b 138068 apache2-prefork-dev_2.2.22-6ubuntu2.1_i386.deb c4308f380b28c2e367845a4933faa4197f2e3ca133f5242ef79c8717e98ebc8c 139238 apache2-threaded-dev_2.2.22-6ubuntu2.1_i386.deb Files: b0a54f1a76933f4133075d77b84c5be6 227762 httpd optional apache2.2-common_2.2.22-6ubuntu2.1_i386.deb c6c694af1608e364bd786f05213c87c1 2987540 httpd optional apache2.2-bin_2.2.22-6ubuntu2.1_i386.deb d5f94326b96d5af4af0ec550220879c1 2246 httpd optional apache2-mpm-worker_2.2.22-6ubuntu2.1_i386.deb d6db5b21ad72824476622bff5ab3179e 2360 httpd optional apache2-mpm-prefork_2.2.22-6ubuntu2.1_i386.deb a9cd11f9f03a182c0b056bddaafc4dcc 2316 httpd optional apache2-mpm-event_2.2.22-6ubuntu2.1_i386.deb 618e47a44b39ab68f5b93bc94ccefcc6 2346 httpd extra apache2-mpm-itk_2.2.22-6ubuntu2.1_i386.deb 550a3d7fe00727974627492c6b309799 91444 httpd optional apache2-utils_2.2.22-6ubuntu2.1_i386.deb 5d1a54f05a43eb02c3454f0b25d89b99 15090 httpd optional apache2-suexec_2.2.22-6ubuntu2.1_i386.deb 3cb2502d3740b00d8cf61a07364bcc9e 16880 httpd extra apache2-suexec-custom_2.2.22-6ubuntu2.1_i386.deb 1f0f72d0d7cf9ac696af6658e51b6c24 1442 httpd optional apache2_2.2.22-6ubuntu2.1_i386.deb de0a0f437677dd91e147f05e41d9bb11 2614760 doc optional apache2-doc_2.2.22-6ubuntu2.1_all.deb 6410a7590cde7dfbf3fbc94919908ce3 138068 httpd extra apache2-prefork-dev_2.2.22-6ubuntu2.1_i386.deb a9c3e494fbb838a03fa764dea0782a81 139238 httpd extra apache2-threaded-dev_2.2.22-6ubuntu2.1_i386.deb Original-Maintainer: Debian Apache Maintainers