Format: 1.7 Date: Tue, 06 Nov 2012 15:01:07 -0500 Source: apache2 Binary: apache2.2-common apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-mpm-perchild apache2-utils apache2 apache2-doc apache2-prefork-dev apache2-threaded-dev apache2-src apache2-dbg Architecture: ia64 Version: 2.2.8-1ubuntu0.24 Distribution: hardy Urgency: low Maintainer: Ubuntu/ia64 Build Daemon Changed-By: Marc Deslauriers Description: apache2 - Next generation, scalable, extendable web server apache2-dbg - Apache debugging symbols apache2-doc - documentation for apache2 apache2-mpm-event - Event driven model for Apache HTTPD apache2-mpm-perchild - Transitional package - please remove apache2-mpm-prefork - Traditional model for Apache HTTPD apache2-mpm-worker - High speed threaded model for Apache HTTPD apache2-prefork-dev - development headers for apache2 apache2-src - Apache source code apache2-threaded-dev - development headers for apache2 apache2-utils - utility programs for webservers apache2.2-common - Next generation, scalable, extendable web server Launchpad-Bugs-Fixed: 1068854 Changes: apache2 (2.2.8-1ubuntu0.24) hardy-security; urgency=low . * SECURITY UPDATE: XSS vulnerability in mod_negotiation - debian/patches/224_CVE-2012-2687.dpatch: escape filenames in modules/mappers/mod_negotiation.c. - CVE-2012-2687 * SECURITY UPDATE: CRIME attack ssl attack (LP: #1068854) - debian/patches/225_CVE-2012-4929.dpatch: backport SSLCompression on|off directive. Defaults to off as enabling compression enables the CRIME attack. - CVE-2012-4929 Files: 74da63d6abbd47c2035600bc52ea4010 1034686 web optional apache2.2-common_2.2.8-1ubuntu0.24_ia64.deb c4178d3d39b3fa2049e900b4ac409419 311874 web optional apache2-mpm-worker_2.2.8-1ubuntu0.24_ia64.deb 48be4462ff8dce83422fa0bab85af84f 305386 web optional apache2-mpm-prefork_2.2.8-1ubuntu0.24_ia64.deb f2d5e8b2b01b8e7b5b7f454d2df0506d 312684 web optional apache2-mpm-event_2.2.8-1ubuntu0.24_ia64.deb 6c55aaa9f95532aa49e4fba4862f2828 160588 web optional apache2-utils_2.2.8-1ubuntu0.24_ia64.deb 0a70547d94c0281c2d31ecc0e22714b8 207026 devel extra apache2-prefork-dev_2.2.8-1ubuntu0.24_ia64.deb 1f81073d2e2c00b153608fcc7def46b7 207788 devel extra apache2-threaded-dev_2.2.8-1ubuntu0.24_ia64.deb Original-Maintainer: Debian Apache Maintainers