Accepted apache2 2.0.52-1ubuntu2 (source)
Martin Pitt
martin.pitt at canonical.com
Thu Nov 11 16:20:02 CST 2004
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Thu, 11 Nov 2004 17:08:56 +0100
Source: apache2
Binary: apache2 apache2-prefork-dev apache2-mpm-prefork apache2-doc libapr0-dev apache2-mpm-threadpool apache2-mpm-worker libapr0 apache2-threaded-dev apache2-common apache2-mpm-perchild
Architecture: source
Version: 2.0.52-1ubuntu2
Distribution: hoary
Urgency: low
Maintainer: Debian Apache Maintainers <debian-apache at lists.debian.org>
Changed-By: Martin Pitt <martin.pitt at canonical.com>
Description:
apache2 - Next generation, scalable, extendable web server
apache2-common - Next generation, scalable, extendable web server
apache2-doc - Documentation for apache2
apache2-mpm-perchild - Experimental High speed perchild threaded model for Apache2
apache2-mpm-prefork - Traditional model for Apache2
apache2-mpm-threadpool - Experimental High speed thread pool model for Apache2
apache2-mpm-worker - High speed threaded model for Apache2
apache2-prefork-dev - Development headers for apache2
apache2-threaded-dev - Development headers for apache2
libapr0 - The Apache Portable Runtime
libapr0-dev - Development headers for libapr
Changes:
apache2 (2.0.52-1ubuntu2) hoary; urgency=low
.
* SECURITY UPDATE to fix remote Denial of Service
* added patch 035_CAN-2004-0942.patch:
- server/protocol.c - Trim trailing whitespace here, after reading a
complete field including continuation lines. Also simplify code to remove
whitespace between field-name and colon.
- This fixes a denial of service (CPU consumption) via an HTTP GET request
with a MIME header containing multiple lines with a large number of space
characters.
* References:
CAN-2004-0942
http://lists.netsys.com/pipermail/full-disclosure/2004-November/028248.html
* Thanks to Gerardo Di Giacomo <gerardo at linux.it> for preparing this update.
Files:
3537c74d04a33395b1bb30ade4dc6e59 1146 net optional apache2_2.0.52-1ubuntu2.dsc
9e7b8ca00985e18a07d9ed8ef80c6238 100159 net optional apache2_2.0.52-1ubuntu2.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBk+T+DecnbV4Fd/IRAlnJAJ9Tlmt9EikY+2oJomnHAI6t0IAc5ACfSInR
MyqO7uJzu3qQF2uFosPyx4A=
=sZPU
-----END PGP SIGNATURE-----
Accepted:
apache2_2.0.52-1ubuntu2.diff.gz
to pool/main/a/apache2/apache2_2.0.52-1ubuntu2.diff.gz
apache2_2.0.52-1ubuntu2.dsc
to pool/main/a/apache2/apache2_2.0.52-1ubuntu2.dsc
More information about the hoary-changes
mailing list