[BSA-049] Security Update for apache2

2011-09-0602:06:51

lists.debian.org

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

8.1

Confidence

High

EPSS

0.96

Percentile

99.5%

JSON

Andres Salomon uploaded new packages for apache2 which fixed the
following security problems:

CVE-2011-3192
DoS by high memory usage for a large number of overlapping
ranges.

For the lenny-backports distribution the problems have been fixed in
version 2.2.16-6+squeeze3~bpo50+1.

For the stable distribution (squeeze), this problem has been fixed in
version 2.2.16-6+squeeze3.
Attachment:
signature.asc
Description: PGP signature

OSVersionArchitecturePackageVersionFilename
Debian6mipselapache2-dbg< 2.2.16-6+squeeze2apache2-dbg_2.2.16-6+squeeze2_mipsel.deb
Debian5amd64apache2-mpm-worker< 2.2.9-10+lenny10apache2-mpm-worker_2.2.9-10+lenny10_amd64.deb
Debian6mipsapache2-threaded-dev< 2.2.16-6+squeeze3apache2-threaded-dev_2.2.16-6+squeeze3_mips.deb
Debian6mipsapache2-suexec-custom< 2.2.16-6+squeeze3apache2-suexec-custom_2.2.16-6+squeeze3_mips.deb
Debian6kfreebsd-i386apache2-suexec< 2.2.16-6+squeeze3apache2-suexec_2.2.16-6+squeeze3_kfreebsd-i386.deb
Debian6kfreebsd-i386apache2-threaded-dev< 2.2.16-6+squeeze2apache2-threaded-dev_2.2.16-6+squeeze2_kfreebsd-i386.deb
Debian6sparcapache2-suexec-custom< 2.2.16-6+squeeze2apache2-suexec-custom_2.2.16-6+squeeze2_sparc.deb
Debian6sparcapache2< 2.2.16-6+squeeze3apache2_2.2.16-6+squeeze3_sparc.deb
Debian6s390apache2-prefork-dev< 2.2.16-6+squeeze3apache2-prefork-dev_2.2.16-6+squeeze3_s390.deb
Debian6ia64apache2-mpm-event< 2.2.16-6+squeeze3apache2-mpm-event_2.2.16-6+squeeze3_ia64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	mipsel	apache2-dbg	< 2.2.16-6+squeeze2	apache2-dbg_2.2.16-6+squeeze2_mipsel.deb
Debian	5	amd64	apache2-mpm-worker	< 2.2.9-10+lenny10	apache2-mpm-worker_2.2.9-10+lenny10_amd64.deb
Debian	6	mips	apache2-threaded-dev	< 2.2.16-6+squeeze3	apache2-threaded-dev_2.2.16-6+squeeze3_mips.deb
Debian	6	mips	apache2-suexec-custom	< 2.2.16-6+squeeze3	apache2-suexec-custom_2.2.16-6+squeeze3_mips.deb
Debian	6	kfreebsd-i386	apache2-suexec	< 2.2.16-6+squeeze3	apache2-suexec_2.2.16-6+squeeze3_kfreebsd-i386.deb
Debian	6	kfreebsd-i386	apache2-threaded-dev	< 2.2.16-6+squeeze2	apache2-threaded-dev_2.2.16-6+squeeze2_kfreebsd-i386.deb
Debian	6	sparc	apache2-suexec-custom	< 2.2.16-6+squeeze2	apache2-suexec-custom_2.2.16-6+squeeze2_sparc.deb
Debian	6	sparc	apache2	< 2.2.16-6+squeeze3	apache2_2.2.16-6+squeeze3_sparc.deb
Debian	6	s390	apache2-prefork-dev	< 2.2.16-6+squeeze3	apache2-prefork-dev_2.2.16-6+squeeze3_s390.deb
Debian	6	ia64	apache2-mpm-event	< 2.2.16-6+squeeze3	apache2-mpm-event_2.2.16-6+squeeze3_ia64.deb