Bug#689936: apache2: handling the CRIME attack

To: 689936@bugs.debian.org
Subject: Bug#689936: apache2: handling the CRIME attack
From: Mike <ipso@snappymail.ca>
Date: Fri, 19 Oct 2012 11:18:25 -0700
Message-id: <[🔎] 50819971.6000001@snappymail.ca>
Reply-to: ipso@snappymail.ca, 689936@bugs.debian.org

Currently Debian stable systems are failing PCI compliance scans due tonot being able to disable SSL compression and therefore vulnerable toCRIME attacks.


So it would be really nice to get this patch applied.

--
Mike

Reply to:

Prev by Date: Bug#663971: apache2.2-common: /etc/init.d/apache2 requires facility $named, causing failed install/upgrade
Next by Date: Bug#663971: apache2.2-common: /etc/init.d/apache2 requires facility $named, causing failed install/upgrade
Previous by thread: Bug#663971: apache2.2-common: /etc/init.d/apache2 requires facility $named, causing failed install/upgrade
Next by thread: Processed: Re: bash-completion completes a2enmod incorrectly
Index(es):
- Date
- Thread