Bug 31300

Summary: apache: Multiple issues (3.1)
Product: UCS Reporter: Moritz Muehlenhoff <jmm>
Component: Security updatesAssignee: Security maintainers <security-maintainers>
Status: CLOSED WONTFIX QA Contact:
Severity: normal    
Priority: P3    
Version: UCS 3.0   
Target Milestone: UCS 3.1-x-errata   
Hardware: Other   
OS: Linux   
What kind of report is it?: --- What type of bug is this?: ---
Who will be affected by this bug?: --- How will those affected feel about the bug?: ---
User Pain: Enterprise Customer affected?:
School Customer affected?: ISV affected?:
Waiting Support: Flags outvoted (downgraded) after PO Review:
Ticket number: Bug group (optional):
Max CVSS v3 score:

Description Moritz Muehlenhoff univentionstaff 2013-05-07 13:22:30 CEST
mod_write doesn't filter log file data for non-printable character (CVE-2013-1862)
Comment 1 Moritz Muehlenhoff univentionstaff 2013-07-11 08:47:39 CEST
Denial of service in mod_dav (CVE-2013-1896)
Comment 2 Moritz Muehlenhoff univentionstaff 2014-03-18 07:03:43 CET
Denial of service in mod_log_config (CVE-2014-0098)
Denial of service in mod_dav (CVE-2013-6438)
Comment 3 Moritz Muehlenhoff univentionstaff 2014-06-02 07:59:16 CEST
The maintenance with bug and security fixes for UCS 3.1-x has ended on 31st of May 2014.

The maintenance of the UCS 3.x major series is continued by UCS 3.2-x that is supplied with bug and security fixes.

Customers still on UCS 3.1-x are encouraged to update to UCS 3.2. Please contact your partner or Univention for any questions.