apache2 apache2: Security fixes for various vulnerabilities apache2: Security fixes for various vulnerabilities This update of the Apache webserver fixes various security issues: - the option IncludesNOEXEC could be bypassed via .htaccess (CVE-2009-1195) - mod_proxy could run into an infinite loop when used as reverse proxy (CVE-2009-1890) - mod_deflate continued to compress large files even after a network connection was closed, causing mod_deflate to consume large amounts of CPU (CVE-2009-1891) - The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command. (CVE-2009-3094) - access restriction bypass in mod_proxy_ftp module (CVE-2009-3095) This update of the Apache webserver fixes various security issues: - the option IncludesNOEXEC could be bypassed via .htaccess (CVE-2009-1195) - mod_proxy could run into an infinite loop when used as reverse proxy (CVE-2009-1890) - mod_deflate continued to compress large files even after a network connection was closed, causing mod_deflate to consume large amounts of CPU (CVE-2009-1891) - The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command. (CVE-2009-3094) - access restriction bypass in mod_proxy_ftp module (CVE-2009-3095) security apache2 i586 b26a0437ef53f474fab64a0264b9e96cc1ff56fa apache2 ppc 8f8bda7830d0c3d90fb21644c5e6e79c3542dcfb apache2 x86_64 4083a336fd62b175a9a4ca2869c2328b413bc3b7 apache2-devel i586 299880f749364f581b6186437cf35743da69ddac apache2-devel ppc a45b2f82f7097a5c6035c68c876b55cb35c3a2f2 apache2-devel x86_64 c79fe1fb0ac72bbc127dfb97ecadf8ecf2bc30cf apache2-doc i586 a3d8dd32a691d1b0c033dd60e80bba06730d2a4e apache2-doc ppc c2bb6ad0ddedb8cd4c16e72e9fb08dbbb984a806 apache2-doc x86_64 d86e224ad125c66c12798c4b0a7426ba6a558e95 apache2-example-pages i586 fd447f231eb3fb18042602c468bab23507f75bdc apache2-example-pages ppc a3fe1f66d968d266b466b81f126e016567a7fde4 apache2-example-pages x86_64 620bf981695bb892a0feb6d693090a796ca53685 apache2-prefork i586 1c570b2b30819e7e85daa913c03c894c363d170f apache2-prefork ppc bbedd48dc3b14dbb28449e47305a94a4829a01aa apache2-prefork x86_64 091dd0a808abc5b416e9b7a84474907d7ac8c98c apache2-utils i586 c7802539997e080258628cff31671ec70e7351f5 apache2-utils ppc ac1f52024ffa81742247df888f9c48e2beec3707 apache2-utils x86_64 5253ba5c15e10c722037a34cb53cf959f5bc62fc apache2-worker i586 152923768b32d59263ad5433122ab73998d73ad6 apache2-worker ppc 636166596370055ed9f8606cd56635c736b2dd25 apache2-worker x86_64 6fb75eeea5cb39ad9938a5596c40e8fd0d04c90a