Alert GCSA-12010 - Vulnerabilita' in Apache HTTP Server 2.2.21

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

    Alert ID : GCSA-12010
        Data : 07 febbraio 2012
      Titolo : Vulnerabilita' in Apache HTTP Server 2.2.21

******************************************************************


:: Descrizione del problema

    E' stata rilasciata una nuova versione del server HTTP Apache
    con la quale vengono risolte varie vulnerabilita'.


:: Software interessato

    Apache HTTP Server 2.2.21 e precedenti


:: Impatto

    Exposure of sensitive information
    Privilege escalation
    Security Bypass


:: Soluzioni

    Aggiornare Apache alla versione 2.2.22
    http://httpd.apache.org/download.cgi


:: Riferimenti

    Apache
    http://www.apache.org/dist/httpd/Announcement2.2.html
    http://httpd.apache.org/security/vulnerabilities_22.html

    Mitre's CVE ID
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3368
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3607
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3639
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4317
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0021
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0031
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0053

    Debian
    http://www.debian.org/security/2012/dsa-2405
    http://lists.debian.org/debian-security-announce/2012/msg00031.html

    Mandriva Linux
    http://www.mandriva.com/en/support/security/advisories/?dis=2011&name=MDVSA-2012:012

-----BEGIN PGP SIGNATURE-----

iQCVAwUBTzFX9fOB+SpikaiRAQJFBgP8D0ahDLfdAAbh+wp/1+6dgRWz11rlQETg
NAtbsrkgBS83K+1/0QEHue9izM5iQib503NWQm6xmnXe5u5emBHmigwmJRHyi+UW
PqIuX9gr59HqcIKqr7Ho+50j728lop3wMz6ThgY6dkV9RfCMMPOLm/QvrTR+KJiI
43Sj1mhNpWo=
=/OE3
-----END PGP SIGNATURE-----