Уведомление безопасности DSA-1934

Высокая (7.5)

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

Debian

apache2 (any) apache2.2-common (any) apache2-dbg (any) apache2-doc (any) apache2-mpm-event (any) apache2-mpm-itk (any) apache2-mpm-perchild (any) apache2-mpm-prefork (any) apache2-mpm-worker (any) apache2-prefork-dev (any) apache2-src (any) apache2-suexec (any) apache2-suexec-custom (any) apache2-threaded-dev (any) apache2-utils (any)

Уведомление безопасности об уязвимостях apache2-utils, apache2-mpm-worker, apache2-mpm-perchild, apache2.2-common, apache2-suexec-custom, apache2-suexec, apache2, apache2-mpm-prefork, apache2-doc, apache2-src, apache2-threaded-dev, apache2-dbg, apache2-mpm-event, apache2-mpm-itk, apache2-prefork-dev

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
apache2.2-common - 2.2.3-4+etch11
apache2-mpm-worker - 2.2.3-4+etch11
apache2-mpm-itk - 2.2.3-01-2+etch4+b1
apache2-mpm-event - 2.2.3-4+etch11
apache2-utils - 2.2.3-4+etch11
apache2-threaded-dev - 2.2.3-4+etch11
apache2-mpm-prefork - 2.2.3-4+etch11
apache2-prefork-dev - 2.2.3-4+etch11
s390x:
apache2-mpm-prefork - 2.2.3-4+etch11
apache2.2-common - 2.2.3-4+etch11
apache2-mpm-event - 2.2.3-4+etch11
apache2-threaded-dev - 2.2.3-4+etch11
apache2-mpm-worker - 2.2.3-4+etch11
apache2-utils - 2.2.3-4+etch11
apache2-prefork-dev - 2.2.3-4+etch11
apache2-mpm-itk - 2.2.3-01-2+etch4+b1
i686:
apache2-prefork-dev - 2.2.3-4+etch11
apache2.2-common - 2.2.3-4+etch11
apache2-mpm-worker - 2.2.3-4+etch11
apache2-mpm-prefork - 2.2.3-4+etch11
apache2-mpm-event - 2.2.3-4+etch11
apache2-mpm-itk - 2.2.3-01-2+etch4+b1
apache2-threaded-dev - 2.2.3-4+etch11
apache2-utils - 2.2.3-4+etch11
hppa:
apache2-mpm-event - 2.2.3-4+etch11
apache2-mpm-itk - 2.2.3-01-2+etch4+b1
apache2-utils - 2.2.3-4+etch11
apache2-mpm-worker - 2.2.3-4+etch11
apache2.2-common - 2.2.3-4+etch11
apache2-mpm-prefork - 2.2.3-4+etch11
apache2-threaded-dev - 2.2.3-4+etch11
apache2-prefork-dev - 2.2.3-4+etch11
sparc:
apache2-mpm-prefork - 2.2.3-4+etch11
apache2-threaded-dev - 2.2.3-4+etch11
apache2-utils - 2.2.3-4+etch11
apache2-mpm-itk - 2.2.3-01-2+etch4+b1
apache2-mpm-event - 2.2.3-4+etch11
apache2-mpm-worker - 2.2.3-4+etch11
apache2.2-common - 2.2.3-4+etch11
apache2-prefork-dev - 2.2.3-4+etch11
x86-64:
apache2-threaded-dev - 2.2.3-4+etch11
apache2-prefork-dev - 2.2.3-4+etch11
apache2.2-common - 2.2.3-4+etch11
apache2-mpm-worker - 2.2.3-4+etch11
apache2-mpm-prefork - 2.2.3-4+etch11
apache2-utils - 2.2.3-4+etch11
apache2-mpm-event - 2.2.3-4+etch11
apache2-mpm-itk - 2.2.3-01-2+etch4+b1
alpha:
apache2-utils - 2.2.3-4+etch11
apache2-threaded-dev - 2.2.3-4+etch11
apache2.2-common - 2.2.3-4+etch11
apache2-mpm-worker - 2.2.3-4+etch11
apache2-mpm-event - 2.2.3-4+etch11
apache2-mpm-prefork - 2.2.3-4+etch11
apache2-prefork-dev - 2.2.3-4+etch11
apache2-mpm-itk - 2.2.3-01-2+etch4+b1
ia64:
apache2-threaded-dev - 2.2.3-4+etch11
apache2-mpm-itk - 2.2.3-01-2+etch4+b1
apache2-mpm-prefork - 2.2.3-4+etch11
apache2-mpm-event - 2.2.3-4+etch11
apache2-prefork-dev - 2.2.3-4+etch11
apache2-utils - 2.2.3-4+etch11
apache2-mpm-worker - 2.2.3-4+etch11
apache2.2-common - 2.2.3-4+etch11
mips:
apache2-mpm-prefork - 2.2.3-4+etch11
apache2-threaded-dev - 2.2.3-4+etch11
apache2-mpm-worker - 2.2.3-4+etch11
apache2.2-common - 2.2.3-4+etch11
apache2-prefork-dev - 2.2.3-4+etch11
apache2-utils - 2.2.3-4+etch11
apache2-mpm-event - 2.2.3-4+etch11
apache2-mpm-itk - 2.2.3-01-2+etch4+b1
noarch:
apache2-doc - 2.2.3-4+etch11
apache2-src - 2.2.3-4+etch11
apache2 - 2.2.3-4+etch11
apache2-mpm-perchild - 2.2.3-4+etch11
mipsel:
apache2-mpm-prefork - 2.2.3-4+etch11
apache2-prefork-dev - 2.2.3-4+etch11
apache2-mpm-worker - 2.2.3-4+etch11
apache2.2-common - 2.2.3-4+etch11
apache2-threaded-dev - 2.2.3-4+etch11
apache2-utils - 2.2.3-4+etch11
apache2-mpm-event - 2.2.3-4+etch11
apache2-mpm-itk - 2.2.3-01-2+etch4+b1
arm:
apache2-mpm-worker - 2.2.3-4+etch11
apache2-threaded-dev - 2.2.3-4+etch11
apache2-prefork-dev - 2.2.3-4+etch11
apache2.2-common - 2.2.3-4+etch11
apache2-utils - 2.2.3-4+etch11
apache2-mpm-itk - 2.2.3-01-2+etch4+b1
apache2-mpm-event - 2.2.3-4+etch11
apache2-mpm-prefork - 2.2.3-4+etch11
Debian GNU/Linux 5:
ppc:
apache2-suexec-custom - 2.2.9-10+lenny6
apache2.2-common - 2.2.9-10+lenny6
apache2-mpm-worker - 2.2.9-10+lenny6
apache2-dbg - 2.2.9-10+lenny6
apache2-mpm-itk - 2.2.6-02-1+lenny2+b2
apache2-prefork-dev - 2.2.9-10+lenny6
apache2-suexec - 2.2.9-10+lenny6
apache2-utils - 2.2.9-10+lenny6
apache2-threaded-dev - 2.2.9-10+lenny6
apache2-mpm-event - 2.2.9-10+lenny6
apache2-mpm-prefork - 2.2.9-10+lenny6
s390x:
apache2-suexec - 2.2.9-10+lenny6
apache2-mpm-itk - 2.2.6-02-1+lenny2+b2
apache2-mpm-prefork - 2.2.9-10+lenny6
apache2-prefork-dev - 2.2.9-10+lenny6
apache2-utils - 2.2.9-10+lenny6
apache2-threaded-dev - 2.2.9-10+lenny6
apache2-dbg - 2.2.9-10+lenny6
apache2.2-common - 2.2.9-10+lenny6
apache2-mpm-worker - 2.2.9-10+lenny6
apache2-mpm-event - 2.2.9-10+lenny6
apache2-suexec-custom - 2.2.9-10+lenny6
i686:
apache2-suexec - 2.2.9-10+lenny6
apache2-mpm-event - 2.2.9-10+lenny6
apache2-mpm-worker - 2.2.9-10+lenny6
apache2-suexec-custom - 2.2.9-10+lenny6
apache2.2-common - 2.2.9-10+lenny6
apache2-utils - 2.2.9-10+lenny6
apache2-mpm-prefork - 2.2.9-10+lenny6
apache2-prefork-dev - 2.2.9-10+lenny6
apache2-dbg - 2.2.9-10+lenny6
apache2-threaded-dev - 2.2.9-10+lenny6
apache2-mpm-itk - 2.2.6-02-1+lenny2+b2
hppa:
apache2-suexec-custom - 2.2.9-10+lenny6
apache2-utils - 2.2.9-10+lenny6
apache2-suexec - 2.2.9-10+lenny6
apache2-mpm-event - 2.2.9-10+lenny6
apache2-mpm-prefork - 2.2.9-10+lenny6
apache2-prefork-dev - 2.2.9-10+lenny6
apache2.2-common - 2.2.9-10+lenny6
apache2-mpm-worker - 2.2.9-10+lenny6
apache2-threaded-dev - 2.2.9-10+lenny6
apache2-mpm-itk - 2.2.6-02-1+lenny2+b2
apache2-dbg - 2.2.9-10+lenny6
sparc:
apache2-dbg - 2.2.9-10+lenny6
apache2-suexec-custom - 2.2.9-10+lenny6
apache2-mpm-prefork - 2.2.9-10+lenny6
apache2-mpm-event - 2.2.9-10+lenny6
apache2-suexec - 2.2.9-10+lenny6
apache2-mpm-itk - 2.2.6-02-1+lenny2+b2
apache2-mpm-worker - 2.2.9-10+lenny6
apache2-prefork-dev - 2.2.9-10+lenny6
apache2.2-common - 2.2.9-10+lenny6
apache2-threaded-dev - 2.2.9-10+lenny6
apache2-utils - 2.2.9-10+lenny6
x86-64:
apache2-prefork-dev - 2.2.9-10+lenny6
apache2.2-common - 2.2.9-10+lenny6
apache2-mpm-worker - 2.2.9-10+lenny6
apache2-threaded-dev - 2.2.9-10+lenny6
apache2-mpm-event - 2.2.9-10+lenny6
apache2-suexec - 2.2.9-10+lenny6
apache2-suexec-custom - 2.2.9-10+lenny6
apache2-mpm-prefork - 2.2.9-10+lenny6
apache2-mpm-itk - 2.2.6-02-1+lenny2+b2
apache2-dbg - 2.2.9-10+lenny6
apache2-utils - 2.2.9-10+lenny6
armel:
apache2-prefork-dev - 2.2.9-10+lenny6
apache2.2-common - 2.2.9-10+lenny6
apache2-mpm-worker - 2.2.9-10+lenny6
apache2-threaded-dev - 2.2.9-10+lenny6
apache2-mpm-event - 2.2.9-10+lenny6
apache2-suexec-custom - 2.2.9-10+lenny6
apache2-suexec - 2.2.9-10+lenny6
apache2-dbg - 2.2.9-10+lenny6
apache2-mpm-prefork - 2.2.9-10+lenny6
apache2-utils - 2.2.9-10+lenny6
alpha:
apache2-threaded-dev - 2.2.9-10+lenny6
apache2-suexec-custom - 2.2.9-10+lenny6
apache2-mpm-prefork - 2.2.9-10+lenny6
apache2-dbg - 2.2.9-10+lenny6
apache2-suexec - 2.2.9-10+lenny6
apache2-mpm-itk - 2.2.6-02-1+lenny2+b2
apache2-prefork-dev - 2.2.9-10+lenny6
apache2.2-common - 2.2.9-10+lenny6
apache2-utils - 2.2.9-10+lenny6
apache2-mpm-worker - 2.2.9-10+lenny6
apache2-mpm-event - 2.2.9-10+lenny6
ia64:
apache2-utils - 2.2.9-10+lenny6
apache2-mpm-itk - 2.2.6-02-1+lenny2+b2
apache2.2-common - 2.2.9-10+lenny6
apache2-prefork-dev - 2.2.9-10+lenny6
apache2-mpm-worker - 2.2.9-10+lenny6
apache2-mpm-event - 2.2.9-10+lenny6
apache2-suexec - 2.2.9-10+lenny6
apache2-dbg - 2.2.9-10+lenny6
apache2-threaded-dev - 2.2.9-10+lenny6
apache2-mpm-prefork - 2.2.9-10+lenny6
apache2-suexec-custom - 2.2.9-10+lenny6
mips:
apache2-dbg - 2.2.9-10+lenny6
apache2.2-common - 2.2.9-10+lenny6
apache2-mpm-worker - 2.2.9-10+lenny6
apache2-suexec - 2.2.9-10+lenny6
apache2-mpm-itk - 2.2.6-02-1+lenny2+b2
apache2-suexec-custom - 2.2.9-10+lenny6
apache2-utils - 2.2.9-10+lenny6
apache2-threaded-dev - 2.2.9-10+lenny6
apache2-mpm-prefork - 2.2.9-10+lenny6
apache2-prefork-dev - 2.2.9-10+lenny6
apache2-mpm-event - 2.2.9-10+lenny6
noarch:
apache2-doc - 2.2.9-10+lenny6
apache2-src - 2.2.9-10+lenny6
apache2 - 2.2.9-10+lenny6
mipsel:
apache2-mpm-prefork - 2.2.9-10+lenny6
apache2-prefork-dev - 2.2.9-10+lenny6
apache2-suexec-custom - 2.2.9-10+lenny6
apache2-threaded-dev - 2.2.9-10+lenny6
apache2-suexec - 2.2.9-10+lenny6
apache2-dbg - 2.2.9-10+lenny6
apache2-mpm-worker - 2.2.9-10+lenny6
apache2.2-common - 2.2.9-10+lenny6
apache2-mpm-itk - 2.2.6-02-1+lenny2+b2
apache2-mpm-event - 2.2.9-10+lenny6
apache2-utils - 2.2.9-10+lenny6
arm:
apache2-mpm-event - 2.2.9-10+lenny6
apache2-suexec-custom - 2.2.9-10+lenny6
apache2-dbg - 2.2.9-10+lenny6
apache2-utils - 2.2.9-10+lenny6
apache2-mpm-itk - 2.2.6-02-1+lenny2+b2
apache2-mpm-worker - 2.2.9-10+lenny6
apache2.2-common - 2.2.9-10+lenny6
apache2-prefork-dev - 2.2.9-10+lenny6
apache2-mpm-prefork - 2.2.9-10+lenny6
apache2-suexec - 2.2.9-10+lenny6
apache2-threaded-dev - 2.2.9-10+lenny6

http://www.debian.org/security/dsa-1934/

Источник: CVE
Наименование: CVE-2009-3555
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555

Источник: CVE
Наименование: CVE-2009-3094
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3094

Источник: CVE
Наименование: CVE-2009-3095
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3095