[ubuntu/saucy-proposed] apache2 2.4.4-6ubuntu5 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Thu Jul 18 15:55:15 UTC 2013


apache2 (2.4.4-6ubuntu5) saucy; urgency=low

  * SECURITY UPDATE: denial of service via MERGE request
    - debian/patches/CVE-2013-1896.patch: make sure DAV is enabled for URI
      in modules/dav/main/mod_dav.c.
    - CVE-2013-1896

Date: Thu, 18 Jul 2013 11:20:47 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/saucy/+source/apache2/2.4.4-6ubuntu5
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 18 Jul 2013 11:20:47 -0400
Source: apache2
Binary: apache2 apache2-data apache2-bin apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-mpm-itk apache2.2-bin libapache2-mod-proxy-html apache2-utils apache2-suexec apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-dbg
Architecture: source
Version: 2.4.4-6ubuntu5
Distribution: saucy
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 apache2    - Apache HTTP Server
 apache2-bin - Apache HTTP Server (binary files and modules)
 apache2-data - Apache HTTP Server (common files)
 apache2-dbg - Apache debugging symbols
 apache2-dev - Apache HTTP Server (development headers)
 apache2-doc - Apache HTTP Server (on-site documentation)
 apache2-mpm-event - transitional event MPM package for apache2
 apache2-mpm-itk - transitional itk MPM package for apache2
 apache2-mpm-prefork - transitional prefork MPM package for apache2
 apache2-mpm-worker - transitional worker MPM package for apache2
 apache2-suexec - transitional package for apache2-suexec-pristine
 apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec
 apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec
 apache2-utils - Apache HTTP Server (utility programs for web servers)
 apache2.2-bin - Transitional package for apache2-bin
 libapache2-mod-proxy-html - Transitional package for apache2-bin
Changes: 
 apache2 (2.4.4-6ubuntu5) saucy; urgency=low
 .
   * SECURITY UPDATE: denial of service via MERGE request
     - debian/patches/CVE-2013-1896.patch: make sure DAV is enabled for URI
       in modules/dav/main/mod_dav.c.
     - CVE-2013-1896
Checksums-Sha1: 
 2b71a2196cec7fca1a4a49bf6bd45c3bd6b61785 3140 apache2_2.4.4-6ubuntu5.dsc
 3019480fe9a4de97b3f899f55ea14d9c2cc2e44b 205902 apache2_2.4.4-6ubuntu5.debian.tar.gz
Checksums-Sha256: 
 6996a8a0d8d60a7b4d507066cc96c2950a2e831a4a1055e3364d5e2739c909ac 3140 apache2_2.4.4-6ubuntu5.dsc
 577747b9d3b05e3ddd743e0b69627c33b16e0a6857bd46e8d3842e40df7b5f4a 205902 apache2_2.4.4-6ubuntu5.debian.tar.gz
Files: 
 6e5ef379ccba0ac26a6df2fb9e9ed216 3140 httpd optional apache2_2.4.4-6ubuntu5.dsc
 e1d59f7927f89ce71c7d5c45c566e49e 205902 httpd optional apache2_2.4.4-6ubuntu5.debian.tar.gz
Original-Maintainer: Debian Apache Maintainers <debian-apache at lists.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQIcBAEBCgAGBQJR6A0cAAoJEGVp2FWnRL6TEFgP/jQNW57/AzBzaR5a28dUDm8I
txsecZjn46Fa3UmMo24w31Obj/IgIUhFwP2zi85cd2pu1XuYHB4JIbta3reCrt2l
VySKGiR6zMHoAVOgjFR1sLsVkTFj2GYaLk2kuw9t5IMHG3pD3mauQHyDvBx9jiU5
vUpCxlmYvgK4FekzrjPi0YDAYgKVN0C7s7J7ALq8KW8UVCom0b8TaPF74Sbgkh4x
+n0BxFxupFxTkFuE707d0IFJZJVEm6nHgqCjMZvsX8MBY6C+IarHHatFAWtGGFEB
GolfzM/YlxAGoqNblqXdMSEHDwQV6VrGjP0HsG12kwM2pkutTkxpBghiaa2h0xry
lu17aFG7Nd8RaYx65JVJFtoTIH5U7q66hBm15ZkRPrD5MYw/CAKBA7xxztD/UlLZ
bFjCXpxZWg1MbM2xwnl+8t/y1M9nj8XR8orE1jZg4NA/JNeOvRTC8e9pwLabzDQv
NU8mF04eeRYmj3RdHecwoxW24WM8N6Pp+vOzs1Mx9eX2GlrEXlH9GZkvCaahH/Ia
6GPwpTmAf83D0PMhkNoXxclE1/Z8W0An+3sbZyIUKstIxo5bQYC1hIXigpu+O9Os
+6kggOGGb16dLuMC0G6BcIOJV6luaNkC2PHuz1jpVPV8HWClB20BUHmPuQwyG9c5
aEWHasRei3nQlcI97IDv
=ayOv
-----END PGP SIGNATURE-----


More information about the Saucy-changes mailing list