apache2

apache2 security update

apache2 Sicherheitsupdate

Missing sanity checks of FTP URLs allowed cross site scripting (XSS) attacks via the mod_proxy_ftp module (CVE-2008-2939). Missing precautions allowed cross site request forgery (CSRF) via the mod_proxy_balancer interface (CVE-2007-6420). A memory leak in the ssl module could crash apache (CVE-2008-1678) Fehlende Gültigkeitsprüfungen von FTP-URLs konnten für Cross-Site-Scripting (XSS) Angriffe über das mod_proxy_ftp Modul ausgenutzt werden (CVE-2008-2939). Fehlende Sicherheitsvorkehrungen konnten für Cross-Site-Request-Forgery (CSRF) Attacken über die mod_proxy_balancer-Schnittstelle ausgenutzt werden (CVE-2007-6420). Ein Speicherleck im SSL modul konnte apache zum Absturz bringen (CVE-2008-1678). security apache2 i586 46f810d0323c680372d013657d5e34f23e02887b 9d477ebbc03e39d630d8b34217fe3070a53a1ec8 334832ef5085c30bf0c02f91375e2a83e0c84446 apache2 ppc c7bea54448e587dcc4e94027f98090a881af28ba 133bb6adafaa2e103392fa36780fffe6e4d0fd82 995b96b23f9d6591c4376703798098d55c16702c apache2 x86_64 bf76df64294e0fb9d8b00e91f3c2e485f617a0c9 e497a993108be5d19b9a568c5299fb15f240d708 d899a758b401ebf79b132a441f9cab45bc61b11c apache2-devel i586 e55bc6ae63aec4622eba3d251806e70ba1c74b2c 6b27c506a3cae53d9bcc636e08515873d4b4e45e 47fedcbb47b07609c0eaee326935c973584f0dcf apache2-devel ppc 430c3c978aec0ce0277965aee9b180a62c4689d2 1ff393d4382faecc2ccebcb5da4d01bc8613ea4e af422c958aaa8b628ea7a5275dde0a815ce482ae apache2-devel x86_64 bda334a1b4d8846abfa9330a0b45af8b34bfcb12 65894fbe5b11162f12b5fa1a4abe0747050b8413 a6ad3c6f25e5f6bf9ce982b72b625053f4c83919 apache2-doc i586 ee3d4937e787ef215e4c919dffd79fc3c0a801a6 b34e0bd10fa03c115b65eb8e029f2f6afaceac64 e207f9aa239539e8fcb82416dba62ee1d635fa17 apache2-doc ppc e66bd5943a84762c4c273bc84c073ff64a11b13d 358b00cd3f23b66e5ed9fea692ff5c30ed5e2e85 118616ebf0743f9f56da1b1ec1d95aef5d1617c8 apache2-doc x86_64 ef42a6e31458afdbd78f62cf66c93afe099b7bd4 5bbe5eda6b9c12a5e08f46140fd47a1255aca9cc 0a4d43913c399b09534b6553eb34652689fa4d62 apache2-example-pages i586 b197667dff4cf0272389ca7f0ae5a4a9a93b0dd7 apache2-example-pages ppc f4455e5afd51d66fdecf545e896f1ec03dfe9b77 apache2-example-pages x86_64 1647910161f2938d44165e3fba4b13671f0cee57 apache2-prefork i586 1af31b2d8842891da91dd9aff49dcb11d7110e67 94371f2c49994aedc66e30cc8f5a8f09ed746147 d98b6e2ff3727c7b47b572ee7a69a160232b8834 apache2-prefork ppc b98155a38875cb59e7abe5878f08d804a89e5fcd 3f2ee43a64bb8d54278c7215a21c3a3d5aabe30e cd8cb6ec22258255435f8f0effc8f90775703237 apache2-prefork x86_64 b868a518e6b7a2e9ed0c1d383a4099603e4fc0f9 124a47994e8b5e12bff9dd414bebbea745fb609f 8129e160b7dcfcac7ea16b8cb1eb24605637cc66 apache2-utils i586 1838d4d9a09a1fe839c07e6c75a10fc59c3ba5e9 71d222e4e18182264be97d4ddfa9d1fae34291e1 6d6e25715bee5124e59dd9271c7a18a6d4842847 apache2-utils ppc 741b4edc8f0f85b1364f96b0a0e34f05c8a9f2ea a02722df92d858d43e056998d9c23e5d8608b6fb 8e204bc01588746a32b854de3e471497cdbd0d7a apache2-utils x86_64 b5e5e93ba4e516f436727d23a60e94f89303f085 5e167997cf4136dc688a516469be9650f51b47dc e33864b89ba5d173e5416d70c90d72ef6bfc9b65 apache2-worker i586 b3c6e37f74aa44c0b59691658fb09b4be791cff7 e4fb7d4de9f91cd2e8ba537701aea091c3b1f000 9a25858f23b0770ac55bb6f73ff8a7c66b0a84bc apache2-worker ppc 271c90c6b4bd958252f68a21fcfe0261bd49fedd 90ad444138405de42315481f6eb19a35ec79e780 d3d76eb01c4e420e26fa318d1c4f169157486bb6 apache2-worker x86_64 eb2b28593458a8391f7971cb71ec96187f7db4d6 bfa85543e779b5dcd79348ab8840bc0adf792814 3156750de465430c363f2656d7ca6d1faee374c0