{"action":"Upgrade apache2 to 2.2.22-12 or later.","affected":[{"fixed":"2.2.22-12","introduced":"0"}],"component":"apache2","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["2.2.22-12"],"id":"tcs_01M5NA5CSWH85WZBSE7H15CC7S","modified_at":"2026-10-23T17:47:42.599809056Z","published_at":"2012-09-15T18:55:03.187Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2012-4929","https://security-tracker.debian.org/tracker/CVE-2012-4929"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2012-4929#Debian:14/apache2","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2012-4929"}],"summary":"The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which"}