[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-13 Thread Launchpad Bug Tracker
This bug was fixed in the package apache2 - 2.2.14-5ubuntu7 --- apache2 (2.2.14-5ubuntu7) lucid; urgency=low * debian/patches/206-fix-potential-memory-leaks.dpatch: Fix potential memory leaks by making sure to not destroy bucket brigades that have been created by earlier

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-13 Thread Launchpad Bug Tracker
This bug was fixed in the package apache2 - 2.2.14-5ubuntu7 --- apache2 (2.2.14-5ubuntu7) lucid; urgency=low * debian/patches/206-fix-potential-memory-leaks.dpatch: Fix potential memory leaks by making sure to not destroy bucket brigades that have been created by earlier

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-12 Thread Steve Langasek
Please also grab the NEWS.Debian as Stefan suggests. FFe granted. -- [FFE] apache2 DoS attack using slowloris https://bugs.launchpad.net/bugs/392759 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in ubuntu. --

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-12 Thread Steve Langasek
Please also grab the NEWS.Debian as Stefan suggests. FFe granted. -- [FFE] apache2 DoS attack using slowloris https://bugs.launchpad.net/bugs/392759 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-09 Thread Thierry Carrez
** Changed in: apache2 (Ubuntu Lucid) Assignee: (unassigned) = Chuck Short (zulcss) -- [FFE] apache2 DoS attack using slowloris https://bugs.launchpad.net/bugs/392759 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in ubuntu.

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-09 Thread Thierry Carrez
** Changed in: apache2 (Ubuntu Lucid) Assignee: (unassigned) = Chuck Short (zulcss) -- [FFE] apache2 DoS attack using slowloris https://bugs.launchpad.net/bugs/392759 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-08 Thread Chuck Short
This has been fixed in 2.2.16 by enabling the module mod-reqtimeout. It has been enabled by default in the next release in Debian already. I think this is an important fix for lucid that should be necessary. I have attached the debdiff and build log. I have ran ab against it and it has not

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-08 Thread Chuck Short
** Attachment added: apache2-mod-reqtimeout.debdiff http://launchpadlibrarian.net/43438704/apache2-mod-reqtimeout.debdiff -- [FFE] apache2 DoS attack using slowloris https://bugs.launchpad.net/bugs/392759 You received this bug notification because you are a member of Ubuntu Server Team,

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-08 Thread Chuck Short
** Attachment added: apache2_2.2.14-5ubuntu7_amd64.build http://launchpadlibrarian.net/43439621/apache2_2.2.14-5ubuntu7_amd64.build -- [FFE] apache2 DoS attack using slowloris https://bugs.launchpad.net/bugs/392759 You received this bug notification because you are a member of Ubuntu Server

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-08 Thread Thierry Carrez
** Also affects: apache2 (Ubuntu Lucid) Importance: High Status: Triaged -- [FFE] apache2 DoS attack using slowloris https://bugs.launchpad.net/bugs/392759 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in ubuntu. --

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-08 Thread Stefan Fritsch
You have written enable it by default in the changelog, but AFAICS, you have missed the postinst change that actually enables the module. You may want to merge the NEWS.Debian entry, too. -- [FFE] apache2 DoS attack using slowloris https://bugs.launchpad.net/bugs/392759 You received this bug

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-08 Thread Chuck Short
Stefan, Thanks Ill update my debdiff tonight then. Regards chuck -- [FFE] apache2 DoS attack using slowloris https://bugs.launchpad.net/bugs/392759 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in ubuntu. --

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-08 Thread Chuck Short
Updated debdiff ** Attachment added: debdiff http://launchpadlibrarian.net/43464037/debdiff -- [FFE] apache2 DoS attack using slowloris https://bugs.launchpad.net/bugs/392759 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-08 Thread Chuck Short
This has been fixed in 2.2.16 by enabling the module mod-reqtimeout. It has been enabled by default in the next release in Debian already. I think this is an important fix for lucid that should be necessary. I have attached the debdiff and build log. I have ran ab against it and it has not

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-08 Thread Chuck Short
** Attachment added: apache2-mod-reqtimeout.debdiff http://launchpadlibrarian.net/43438704/apache2-mod-reqtimeout.debdiff -- [FFE] apache2 DoS attack using slowloris https://bugs.launchpad.net/bugs/392759 You received this bug notification because you are a member of Ubuntu Bugs, which is

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-08 Thread Chuck Short
** Attachment added: apache2_2.2.14-5ubuntu7_amd64.build http://launchpadlibrarian.net/43439621/apache2_2.2.14-5ubuntu7_amd64.build -- [FFE] apache2 DoS attack using slowloris https://bugs.launchpad.net/bugs/392759 You received this bug notification because you are a member of Ubuntu Bugs,

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-08 Thread Thierry Carrez
** Also affects: apache2 (Ubuntu Lucid) Importance: High Status: Triaged -- [FFE] apache2 DoS attack using slowloris https://bugs.launchpad.net/bugs/392759 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-08 Thread Stefan Fritsch
You have written enable it by default in the changelog, but AFAICS, you have missed the postinst change that actually enables the module. You may want to merge the NEWS.Debian entry, too. -- [FFE] apache2 DoS attack using slowloris https://bugs.launchpad.net/bugs/392759 You received this bug

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-08 Thread Chuck Short
Stefan, Thanks Ill update my debdiff tonight then. Regards chuck -- [FFE] apache2 DoS attack using slowloris https://bugs.launchpad.net/bugs/392759 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list

[Bug 392759] Re: [FFE] apache2 DoS attack using slowloris

2010-04-08 Thread Chuck Short
Updated debdiff ** Attachment added: debdiff http://launchpadlibrarian.net/43464037/debdiff -- [FFE] apache2 DoS attack using slowloris https://bugs.launchpad.net/bugs/392759 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. --