Bug#351246: apache2: [CVE-2005-3357] DoS (crash) with mod_ssl

[intrigeri <intrigeri@boum.org>]

Package: apache2
Tags: security, sarge
Version: 2.0.54-5
Severity: important

Upstream reports a DoS issue in Apache:
http://issues.apache.org/bugzilla/show_bug.cgi?id=37791

This has been fixed in sid's apache2 2.0.55-4, but seems to remain
in sarge.

Impact does not seem to be substantial (very specific configuration
required), therefore I'm setting the severity to "important".

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (300, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.11-20050709
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to fr_FR.UTF-8)

Versions of packages apache2 depends on:
ii  apache2-mpm-worker            2.0.54-5   high speed threaded model for Apac

-- no debconf information

-- 
  intrigeri <intrigeri@boum.org>