Уведомление безопасности DSA-2035

Средняя (5.0)

(AV:N/AC:L/Au:N/C:N/I:N/A:P)

Debian

apache2 (any) apache2.2-common (any) apache2-dbg (any) apache2-doc (any) apache2-mpm-event (any) apache2-mpm-itk (any) apache2-mpm-prefork (any) apache2-mpm-worker (any) apache2-prefork-dev (any) apache2-src (any) apache2-suexec (any) apache2-suexec-custom (any) apache2-threaded-dev (any) apache2-utils (any)

Уведомление безопасности об уязвимостях apache2-threaded-dev, apache2-utils, apache2-mpm-worker, apache2.2-common, apache2-suexec-custom, apache2-suexec, apache2, apache2-doc, apache2-src, apache2-mpm-prefork, apache2-dbg, apache2-mpm-itk, apache2-mpm-event, apache2-prefork-dev

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 5:
ppc:
apache2-mpm-prefork - 2.2.9-10+lenny7
apache2-dbg - 2.2.9-10+lenny7
apache2.2-common - 2.2.9-10+lenny7
apache2-mpm-worker - 2.2.9-10+lenny7
apache2-suexec - 2.2.9-10+lenny7
apache2-mpm-event - 2.2.9-10+lenny7
apache2-suexec-custom - 2.2.9-10+lenny7
apache2-threaded-dev - 2.2.9-10+lenny7
apache2-utils - 2.2.9-10+lenny7
apache2-prefork-dev - 2.2.9-10+lenny7
apache2-mpm-itk - 2.2.6-02-1+lenny2+b3
s390x:
apache2-mpm-worker - 2.2.9-10+lenny7
apache2-suexec-custom - 2.2.9-10+lenny7
apache2.2-common - 2.2.9-10+lenny7
apache2-dbg - 2.2.9-10+lenny7
apache2-mpm-prefork - 2.2.9-10+lenny7
apache2-prefork-dev - 2.2.9-10+lenny7
apache2-suexec - 2.2.9-10+lenny7
apache2-mpm-event - 2.2.9-10+lenny7
apache2-threaded-dev - 2.2.9-10+lenny7
apache2-utils - 2.2.9-10+lenny7
apache2-mpm-itk - 2.2.6-02-1+lenny2+b3
i686:
apache2-mpm-prefork - 2.2.9-10+lenny7
apache2-prefork-dev - 2.2.9-10+lenny7
apache2-threaded-dev - 2.2.9-10+lenny7
apache2-suexec - 2.2.9-10+lenny7
apache2-mpm-event - 2.2.9-10+lenny7
apache2.2-common - 2.2.9-10+lenny7
apache2-suexec-custom - 2.2.9-10+lenny7
apache2-mpm-worker - 2.2.9-10+lenny7
apache2-utils - 2.2.9-10+lenny7
apache2-dbg - 2.2.9-10+lenny7
apache2-mpm-itk - 2.2.6-02-1+lenny2+b3
hppa:
apache2-dbg - 2.2.9-10+lenny7
apache2-mpm-event - 2.2.9-10+lenny7
apache2-mpm-worker - 2.2.9-10+lenny7
apache2-suexec-custom - 2.2.9-10+lenny7
apache2.2-common - 2.2.9-10+lenny7
apache2-utils - 2.2.9-10+lenny7
apache2-suexec - 2.2.9-10+lenny7
apache2-threaded-dev - 2.2.9-10+lenny7
apache2-mpm-prefork - 2.2.9-10+lenny7
apache2-prefork-dev - 2.2.9-10+lenny7
apache2-mpm-itk - 2.2.6-02-1+lenny2+b3
sparc:
apache2-utils - 2.2.9-10+lenny7
apache2-suexec - 2.2.9-10+lenny7
apache2.2-common - 2.2.9-10+lenny7
apache2-prefork-dev - 2.2.9-10+lenny7
apache2-mpm-event - 2.2.9-10+lenny7
apache2-mpm-worker - 2.2.9-10+lenny7
apache2-suexec-custom - 2.2.9-10+lenny7
apache2-threaded-dev - 2.2.9-10+lenny7
apache2-dbg - 2.2.9-10+lenny7
apache2-mpm-prefork - 2.2.9-10+lenny7
apache2-mpm-itk - 2.2.6-02-1+lenny2+b3
x86-64:
apache2-prefork-dev - 2.2.9-10+lenny7
apache2-mpm-prefork - 2.2.9-10+lenny7
apache2-dbg - 2.2.9-10+lenny7
apache2.2-common - 2.2.9-10+lenny7
apache2-threaded-dev - 2.2.9-10+lenny7
apache2-mpm-worker - 2.2.9-10+lenny7
apache2-utils - 2.2.9-10+lenny7
apache2-suexec - 2.2.9-10+lenny7
apache2-mpm-event - 2.2.9-10+lenny7
apache2-suexec-custom - 2.2.9-10+lenny7
apache2-mpm-itk - 2.2.6-02-1+lenny2+b3
armel:
apache2-mpm-event - 2.2.9-10+lenny7
apache2-mpm-prefork - 2.2.9-10+lenny7
apache2-prefork-dev - 2.2.9-10+lenny7
apache2-utils - 2.2.9-10+lenny7
apache2-threaded-dev - 2.2.9-10+lenny7
apache2-dbg - 2.2.9-10+lenny7
apache2-suexec - 2.2.9-10+lenny7
apache2-suexec-custom - 2.2.9-10+lenny7
apache2.2-common - 2.2.9-10+lenny7
apache2-mpm-worker - 2.2.9-10+lenny7
apache2-mpm-itk - 2.2.6-02-1+lenny2+b3
alpha:
apache2-utils - 2.2.9-10+lenny7
apache2.2-common - 2.2.9-10+lenny7
apache2-suexec-custom - 2.2.9-10+lenny7
apache2-mpm-worker - 2.2.9-10+lenny7
apache2-dbg - 2.2.9-10+lenny7
apache2-mpm-event - 2.2.9-10+lenny7
apache2-threaded-dev - 2.2.9-10+lenny7
apache2-prefork-dev - 2.2.9-10+lenny7
apache2-mpm-prefork - 2.2.9-10+lenny7
apache2-suexec - 2.2.9-10+lenny7
apache2-mpm-itk - 2.2.6-02-1+lenny2+b4
ia64:
apache2-suexec - 2.2.9-10+lenny7
apache2-dbg - 2.2.9-10+lenny7
apache2-suexec-custom - 2.2.9-10+lenny7
apache2-mpm-prefork - 2.2.9-10+lenny7
apache2-mpm-worker - 2.2.9-10+lenny7
apache2-mpm-event - 2.2.9-10+lenny7
apache2.2-common - 2.2.9-10+lenny7
apache2-threaded-dev - 2.2.9-10+lenny7
apache2-utils - 2.2.9-10+lenny7
apache2-prefork-dev - 2.2.9-10+lenny7
apache2-mpm-itk - 2.2.6-02-1+lenny2+b3
mips:
apache2-mpm-prefork - 2.2.9-10+lenny7
apache2-prefork-dev - 2.2.9-10+lenny7
apache2-mpm-worker - 2.2.9-10+lenny7
apache2.2-common - 2.2.9-10+lenny7
apache2-dbg - 2.2.9-10+lenny7
apache2-threaded-dev - 2.2.9-10+lenny7
apache2-utils - 2.2.9-10+lenny7
apache2-suexec - 2.2.9-10+lenny7
apache2-mpm-event - 2.2.9-10+lenny7
apache2-suexec-custom - 2.2.9-10+lenny7
apache2-mpm-itk - 2.2.6-02-1+lenny2+b3
noarch:
apache2 - 2.2.9-10+lenny7
apache2-doc - 2.2.9-10+lenny7
apache2-src - 2.2.9-10+lenny7
mipsel:
apache2-mpm-worker - 2.2.9-10+lenny7
apache2-threaded-dev - 2.2.9-10+lenny7
apache2-prefork-dev - 2.2.9-10+lenny7
apache2.2-common - 2.2.9-10+lenny7
apache2-suexec-custom - 2.2.9-10+lenny7
apache2-mpm-prefork - 2.2.9-10+lenny7
apache2-dbg - 2.2.9-10+lenny7
apache2-utils - 2.2.9-10+lenny7
apache2-suexec - 2.2.9-10+lenny7
apache2-mpm-event - 2.2.9-10+lenny7
apache2-mpm-itk - 2.2.6-02-1+lenny2+b3
arm:
apache2-mpm-worker - 2.2.9-10+lenny7
apache2.2-common - 2.2.9-10+lenny7
apache2-mpm-prefork - 2.2.9-10+lenny7
apache2-prefork-dev - 2.2.9-10+lenny7
apache2-threaded-dev - 2.2.9-10+lenny7
apache2-utils - 2.2.9-10+lenny7
apache2-dbg - 2.2.9-10+lenny7
apache2-suexec-custom - 2.2.9-10+lenny7
apache2-suexec - 2.2.9-10+lenny7
apache2-mpm-event - 2.2.9-10+lenny7
apache2-mpm-itk - 2.2.6-02-1+lenny2+b3

http://www.debian.org/security/dsa-2035/

Источник: CVE
Наименование: CVE-2010-0408
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0408

Источник: CVE
Наименование: CVE-2010-0434
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0434