Format: 1.8 Date: Thu, 08 Jul 2021 03:20:46 +0000 Source: apache2 Binary: apache2 apache2-bin apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-pristine apache2-utils libapache2-mod-md libapache2-mod-proxy-uwsgi Built-For-Profiles: noudeb Architecture: i386 Version: 2.4.48-3ubuntu1 Distribution: impish-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Bryce Harrington Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Changes: apache2 (2.4.48-3ubuntu1) impish; urgency=medium . * Merge with Debian unstable. Remaining changes: - debian/{control, apache2.install, apache2-utils.ufw.profile, apache2.dirs}: Add ufw profiles. (LP: 261198) - debian/apache2.py, debian/apache2-bin.install: Add apport hook. (LP: 609177) - d/index.html, d/icons/ubuntu-logo.png, d/apache2.postrm, d/s/include-binaries: replace Debian with Ubuntu on default page and add Ubuntu icon file. (LP: 1288690) - d/apache2ctl: Also use systemd for graceful if it is in use. This extends an earlier fix for the start command to behave similarly for restart / graceful. Fixes service failures on unattended upgrade. (LP: 1832182) - d/apache2ctl: Also use /run/systemd to check for systemd usage (LP: 1918209) * Dropped: - d/t/control, d/t/check-http2: add basic test for http2 support [Fixed in 2.4.48-2] - d/p/t/apache/expr_string.t: Avoid test suite failure due to timing [Fixed in 2.4.48-1] - d/p/CVE-2020-13950.patch: don't dereference NULL proxy connection in modules/proxy/mod_proxy_http.c. [Fixed in 2.4.48 upstream] - d/p/CVE-2020-35452.patch: fast validation of the nonce's base64 to fail early if the format can't match anyway in modules/aaa/mod_auth_digest.c. [Fixed in 2.4.48 upstream] - d/p/CVE-2021-26690.patch: save one apr_strtok() in session_identity_decode() in modules/session/mod_session.c. [Fixed in 2.4.48 upstream] - d/p/CVE-2021-26691.patch: account for the '&' in identity_concat() in modules/session/mod_session.c. [Fixed in 2.4.48 upstream] - d/p/CVE-2021-30641.patch: change default behavior in server/request.c. [Fixed in 2.4.48 upstream] Checksums-Sha1: 8501101dcf07797d13f35a7a9e339100646e2e3a 2732144 apache2-bin-dbgsym_2.4.48-3ubuntu1_i386.ddeb 792a1794153fecec64e8144783638b9ab436159f 1412294 apache2-bin_2.4.48-3ubuntu1_i386.deb bc9ea3db8cb175d26ea948a019580b921d6f0821 186770 apache2-dev_2.4.48-3ubuntu1_i386.deb aa912c8f895022bb85a8feabf9f585a68f74cea3 2990 apache2-ssl-dev_2.4.48-3ubuntu1_i386.deb 54aa8b1c36d5e38b71c93875b225694a837ac331 11182 apache2-suexec-custom-dbgsym_2.4.48-3ubuntu1_i386.ddeb c5615950faabb9cfea5e6484489e8ab6d650f5c8 16508 apache2-suexec-custom_2.4.48-3ubuntu1_i386.deb 7614268862aee419efa27da98bbe2e562678dab7 9928 apache2-suexec-pristine-dbgsym_2.4.48-3ubuntu1_i386.ddeb 2387086b6862b0d2292827e124dc668a0e143c98 14888 apache2-suexec-pristine_2.4.48-3ubuntu1_i386.deb a61542e3d758ae058d20e345b6715d927d71f8ff 107010 apache2-utils-dbgsym_2.4.48-3ubuntu1_i386.ddeb 5ca8c03bc5f59817c44bdb1d4a43334d5d2c8cbd 93174 apache2-utils_2.4.48-3ubuntu1_i386.deb 70df6534ff09dbd71f4042b3eb25a05d01f51500 11433 apache2_2.4.48-3ubuntu1_i386.buildinfo ce73fe6ab303c3587fcaa3e5b11d921de901a8da 98002 apache2_2.4.48-3ubuntu1_i386.deb 5257c62d487c5bf2f073c2eaf4c1d8cde8fe4a40 804 libapache2-mod-md_2.4.48-3ubuntu1_i386.deb c6c0578d57b86d111da8841f4840ea2e10379ed7 990 libapache2-mod-proxy-uwsgi_2.4.48-3ubuntu1_i386.deb Checksums-Sha256: 9fc2a2ad795b96c734cf76105a212d9c61d429d0ea5d17606680b701822e9020 2732144 apache2-bin-dbgsym_2.4.48-3ubuntu1_i386.ddeb 2602a1ebf41410160d059f254eee758589bfb7d658d4e18eb989bc5261a9b606 1412294 apache2-bin_2.4.48-3ubuntu1_i386.deb d4287d6f31f5f6d3bda936297d299920deb4a96c895897893df6e801df0640d7 186770 apache2-dev_2.4.48-3ubuntu1_i386.deb bc1bf7f98ce0adda1be6eafc4ea95af2f9b9ace861b06b2c5181e2a04c993f2c 2990 apache2-ssl-dev_2.4.48-3ubuntu1_i386.deb ac4ad8e8cc407c9cc46a379ae9a96624d113b4e3c874c172da654fdd831c578f 11182 apache2-suexec-custom-dbgsym_2.4.48-3ubuntu1_i386.ddeb 02e5670c14c572ffbdebfa276fbe70e728c43c69c1f14cf88ca94e982b4187ff 16508 apache2-suexec-custom_2.4.48-3ubuntu1_i386.deb 68d7c3c317497c4eb1a7c8cbc23f86aba1c93f0b02baf377271fd2885b77cff2 9928 apache2-suexec-pristine-dbgsym_2.4.48-3ubuntu1_i386.ddeb 2ce3983526c14e134244fd988cfb8c1c006351781e875ea817f5143cc56e6e62 14888 apache2-suexec-pristine_2.4.48-3ubuntu1_i386.deb bfd692ce9528853bbea7abb0c9a04e334d0a503241ea19a331468d68f4420f4b 107010 apache2-utils-dbgsym_2.4.48-3ubuntu1_i386.ddeb 9496ce955d958cee0d0a146d4c5efd61276e8e1c1c41fcbad19b33ba9e64cc1b 93174 apache2-utils_2.4.48-3ubuntu1_i386.deb c2a453453a5e10e1085859d478d9722ac9e1061b51a7305d1123237c34542a78 11433 apache2_2.4.48-3ubuntu1_i386.buildinfo 58a7741ce046f6c5568540a247a080a40c097a4cd7d6619ff9ee214db50a1874 98002 apache2_2.4.48-3ubuntu1_i386.deb 395d590954d25d59e9966600220e1b78542bb2bfca999a205d6bbfa76c48c2ae 804 libapache2-mod-md_2.4.48-3ubuntu1_i386.deb 8d08e618efecacb37052fcbcfe90b54549c74a603b1046c724a9c34daf1bf930 990 libapache2-mod-proxy-uwsgi_2.4.48-3ubuntu1_i386.deb Files: b21d8f8b0251f3f601c0541b824f9cb1 2732144 debug optional apache2-bin-dbgsym_2.4.48-3ubuntu1_i386.ddeb e4813dfc2c0191479e0e44665f30620b 1412294 httpd optional apache2-bin_2.4.48-3ubuntu1_i386.deb e4315fa6d03bf71662f3abd08339e7d4 186770 httpd optional apache2-dev_2.4.48-3ubuntu1_i386.deb 51193f1a091d597864ad822f63208fe1 2990 httpd optional apache2-ssl-dev_2.4.48-3ubuntu1_i386.deb cac5af65cf535e0d7a70cf5b38cbc49a 11182 debug optional apache2-suexec-custom-dbgsym_2.4.48-3ubuntu1_i386.ddeb 455ba88be2cb3754f5122cedbba786d5 16508 httpd optional apache2-suexec-custom_2.4.48-3ubuntu1_i386.deb 70db6b4f221d5e8ccabf585263176b8a 9928 debug optional apache2-suexec-pristine-dbgsym_2.4.48-3ubuntu1_i386.ddeb ed79570b59851b4bf509ae628b2456fc 14888 httpd optional apache2-suexec-pristine_2.4.48-3ubuntu1_i386.deb f5a79df162682cc32a585328d570b223 107010 debug optional apache2-utils-dbgsym_2.4.48-3ubuntu1_i386.ddeb b709acebc6475695d1b51d6c3aa05002 93174 httpd optional apache2-utils_2.4.48-3ubuntu1_i386.deb 9b7301b7ba972b996d6290f9c35a72fc 11433 httpd optional apache2_2.4.48-3ubuntu1_i386.buildinfo 68b2b17f0e878aff6ef8082e472cb427 98002 httpd optional apache2_2.4.48-3ubuntu1_i386.deb aaf838626a2ad67296ce4ad07158cee3 804 oldlibs optional libapache2-mod-md_2.4.48-3ubuntu1_i386.deb b34a4d2698a0d6157d3ceb468e3ef51e 990 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.48-3ubuntu1_i386.deb Original-Maintainer: Debian Apache Maintainers