[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#642956: pu: package apache2/2.2.16-6+squeeze4



On Mon, 2011-09-26 at 00:34 +0200, Stefan Fritsch wrote:
> Please review apache2/2.2.16-6+squeeze4 for inclusion in s-p-u.
> It fixes a minor DoS issue, some bugs in the init script and
> adds some docs.

Thanks for this.  A couple of queries:

>    * Fix CVE-2011-3348: Possible denial of service in mod_proxy_ajp
>      if combined with mod_proxy_balancer.

As far as I can tell from the upload history and the security tracker,
this is still unfixed in unstable - is that correct?

>    * Tweak patch header to fix "dpatch unapply" with unstable's patch/dpatch.

Does the result still work with squeeze's tools?

Regards,

Adam




Reply to: