Format: 1.8 Date: Wed, 08 Mar 2023 11:32:34 -0500 Source: apache2 Binary: apache2 apache2-bin apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-pristine apache2-utils libapache2-mod-md libapache2-mod-proxy-uwsgi Built-For-Profiles: noudeb Architecture: ppc64el Version: 2.4.55-1ubuntu2 Distribution: lunar-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Changes: apache2 (2.4.55-1ubuntu2) lunar; urgency=medium . * SECURITY UPDATE: HTTP request splitting with mod_rewrite and mod_proxy - debian/patches/CVE-2023-25690-1.patch: don't forward invalid query strings in modules/http2/mod_proxy_http2.c, modules/mappers/mod_rewrite.c, modules/proxy/mod_proxy_ajp.c, modules/proxy/mod_proxy_balancer.c, modules/proxy/mod_proxy_http.c, modules/proxy/mod_proxy_wstunnel.c. - debian/patches/CVE-2023-25690-2.patch: Fix missing APLOGNO in modules/http2/mod_proxy_http2.c. - CVE-2023-25690 * SECURITY UPDATE: mod_proxy_uwsgi HTTP response splitting - debian/patches/CVE-2023-27522.patch: stricter backend HTTP response parsing/validation in modules/proxy/mod_proxy_uwsgi.c. - CVE-2023-27522 Checksums-Sha1: b2df2726f34f4c0a34d89ff598a0021bceb703d8 3842606 apache2-bin-dbgsym_2.4.55-1ubuntu2_ppc64el.ddeb 2c0047c8fc500bef9f2913a958ae267ed33266e9 1518988 apache2-bin_2.4.55-1ubuntu2_ppc64el.deb 5a85c45639f9939dc129ab2d0fe4bc2b5f5527de 197956 apache2-dev_2.4.55-1ubuntu2_ppc64el.deb 4447348f0e97c82d9afef1cc79d4dece07630403 2986 apache2-ssl-dev_2.4.55-1ubuntu2_ppc64el.deb a4da3969a567291aa72d7a5cac4aa0ae0f747438 13438 apache2-suexec-custom-dbgsym_2.4.55-1ubuntu2_ppc64el.ddeb 8bf9647cfd301cff659b4e802f1590dbc57d3264 16040 apache2-suexec-custom_2.4.55-1ubuntu2_ppc64el.deb cd989cd2f50c1c1389dc9958e9201ab6c8555dbe 12086 apache2-suexec-pristine-dbgsym_2.4.55-1ubuntu2_ppc64el.ddeb a6b04ff1930f9f75e400fce3395b7324b03fe703 14326 apache2-suexec-pristine_2.4.55-1ubuntu2_ppc64el.deb fe0e84896d5b5e9755abe77ef5a71e0583b61efd 129436 apache2-utils-dbgsym_2.4.55-1ubuntu2_ppc64el.ddeb d469ee8df58183fa78611c71f541541e9a3a3073 99562 apache2-utils_2.4.55-1ubuntu2_ppc64el.deb 747c8139bccc3802fbc834ddb6c6c6b7386c27c7 11292 apache2_2.4.55-1ubuntu2_ppc64el.buildinfo 5d64a0d2b1e4a6f2d4c71b296bce3a791b568c45 96992 apache2_2.4.55-1ubuntu2_ppc64el.deb 78988f88d7bdac8c3cc07b2034dde34147017e70 800 libapache2-mod-md_2.4.55-1ubuntu2_ppc64el.deb fdee7543f8fdfb33c89fa8bf01ad4909f2e5bf7e 990 libapache2-mod-proxy-uwsgi_2.4.55-1ubuntu2_ppc64el.deb Checksums-Sha256: 92419c5ceec30a202b43710b47eff43ea716d0a240e85c4ed153a9e219b320bf 3842606 apache2-bin-dbgsym_2.4.55-1ubuntu2_ppc64el.ddeb b0571b6ce9f3a095f90913b0abdad46ea865a63da81597090cbf867db7c267ef 1518988 apache2-bin_2.4.55-1ubuntu2_ppc64el.deb f04b51fe56e56fa475be30793a4628779bb9fa43ef1e4e254c794ae04f158f60 197956 apache2-dev_2.4.55-1ubuntu2_ppc64el.deb 972e7a274b4baccb7a58b2b05d950cc94ef3609b76c36fdc34b885060ced98eb 2986 apache2-ssl-dev_2.4.55-1ubuntu2_ppc64el.deb 85b1849a1c19d434b3cde2754edf1e28d1d9831d1b4b85cda9a40d1f3cb96c74 13438 apache2-suexec-custom-dbgsym_2.4.55-1ubuntu2_ppc64el.ddeb 7f7346a45bca2d146d564726c9a38e91da07ca257f8b67f88b3d3d6ee5e58d90 16040 apache2-suexec-custom_2.4.55-1ubuntu2_ppc64el.deb ef54030627a0e965d30284e6e0043b3e2029cd70fa6e27e7fb0c7e7b1a38fdf2 12086 apache2-suexec-pristine-dbgsym_2.4.55-1ubuntu2_ppc64el.ddeb af0d1830b98c79d1e7e563ccd583fffebd7531a0dd750e0fd064b3961f67123c 14326 apache2-suexec-pristine_2.4.55-1ubuntu2_ppc64el.deb d69d1e34fb8cc617f5fd3dba9296ca6e02146a93b98b7318f553dc68bbe74ad0 129436 apache2-utils-dbgsym_2.4.55-1ubuntu2_ppc64el.ddeb 6bb50467d09d4ccfdfb8f0d2b9d4ec23ddefc3374dc5f7b2e2741f9442ccfddb 99562 apache2-utils_2.4.55-1ubuntu2_ppc64el.deb 29154d588d882c88efb780d986605b1c0ea027068c46163e8e013cc08938e855 11292 apache2_2.4.55-1ubuntu2_ppc64el.buildinfo d2b7355de5eee86544f838ff6c9e8926413ff5b4b7a03beed7ebe458c446df14 96992 apache2_2.4.55-1ubuntu2_ppc64el.deb bb2df87191cb3f00c206cb650f0f01aca150d4aebb1d79612d5acee6ba9d2569 800 libapache2-mod-md_2.4.55-1ubuntu2_ppc64el.deb 4bea5c930826254844a3638a987a915b46e9a5897894f585ec3f9aff8bfe2c7e 990 libapache2-mod-proxy-uwsgi_2.4.55-1ubuntu2_ppc64el.deb Files: 0542aeb6068c4bed260de3b6d3ad70a4 3842606 debug optional apache2-bin-dbgsym_2.4.55-1ubuntu2_ppc64el.ddeb 9df2b39d1bccb4eea8d876dc94ee13b4 1518988 httpd optional apache2-bin_2.4.55-1ubuntu2_ppc64el.deb 0ea58b79a24d85dad9a2af7fab227d17 197956 httpd optional apache2-dev_2.4.55-1ubuntu2_ppc64el.deb cf5fca13701d4cc12e80f6c43d3f70d9 2986 httpd optional apache2-ssl-dev_2.4.55-1ubuntu2_ppc64el.deb 3e9f23a4e774b7637d09d89e98b97a2e 13438 debug optional apache2-suexec-custom-dbgsym_2.4.55-1ubuntu2_ppc64el.ddeb 4c704bd1ae88cfd991827dcf0614918d 16040 httpd optional apache2-suexec-custom_2.4.55-1ubuntu2_ppc64el.deb 5d38e2eab33e4188645df833b3a2bad4 12086 debug optional apache2-suexec-pristine-dbgsym_2.4.55-1ubuntu2_ppc64el.ddeb 7d19886bccd3b7e39c1146607a7f0a57 14326 httpd optional apache2-suexec-pristine_2.4.55-1ubuntu2_ppc64el.deb e103aac7bef67314c4d5c60e9a95ea7a 129436 debug optional apache2-utils-dbgsym_2.4.55-1ubuntu2_ppc64el.ddeb acf6b10f1cee2869065f22ee701f6d5b 99562 httpd optional apache2-utils_2.4.55-1ubuntu2_ppc64el.deb 4e937a1ced229ca6698f58ce0dd87ceb 11292 httpd optional apache2_2.4.55-1ubuntu2_ppc64el.buildinfo f46cca256086bb408e807882de8498d3 96992 httpd optional apache2_2.4.55-1ubuntu2_ppc64el.deb cb81812a9fa2cdbd51fd22f511d02c04 800 oldlibs optional libapache2-mod-md_2.4.55-1ubuntu2_ppc64el.deb 88fd8eb78ab047594cda851ac04c7660 990 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.55-1ubuntu2_ppc64el.deb Original-Maintainer: Debian Apache Maintainers