Format: 1.8 Date: Mon, 26 Jun 2017 08:04:58 -0400 Source: apache2 Binary: apache2 apache2-data apache2-bin apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-mpm-itk apache2.2-bin libapache2-mod-proxy-html libapache2-mod-macro apache2-utils apache2-suexec apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-dbg Architecture: powerpc Version: 2.4.7-1ubuntu4.16 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (binary files and modules) apache2-data - Apache HTTP Server (common files) apache2-dbg - Apache debugging symbols apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-mpm-event - transitional event MPM package for apache2 apache2-mpm-itk - transitional itk MPM package for apache2 apache2-mpm-prefork - transitional prefork MPM package for apache2 apache2-mpm-worker - transitional worker MPM package for apache2 apache2-suexec - transitional package for apache2-suexec-pristine apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) apache2.2-bin - Transitional package for apache2-bin libapache2-mod-macro - Transitional package for apache2-bin libapache2-mod-proxy-html - Transitional package for apache2-bin Changes: apache2 (2.4.7-1ubuntu4.16) trusty-security; urgency=medium . * SECURITY UPDATE: authentication bypass in ap_get_basic_auth_pw() - debian/patches/CVE-2017-3167.patch: deprecate and replace ap_get_basic_auth_pw in include/ap_mmn.h, include/http_protocol.h, server/protocol.c, server/request.c. - CVE-2017-3167 * SECURITY UPDATE: NULL pointer deref in ap_hook_process_connection() - debian/patches/CVE-2017-3169.patch: fix ctx passed to ssl_io_filter_error() in modules/ssl/ssl_engine_io.c. - CVE-2017-3169 * SECURITY UPDATE: denial of service and possible incorrect value return in HTTP strict parsing changes - debian/patches/CVE-2017-7668.patch: short-circuit on NULL in server/util.c. - CVE-2017-7668 * SECURITY UPDATE: mod_mime DoS via crafted Content-Type response header - debian/patches/CVE-2017-7679.patch: fix quoted pair scanning in modules/http/mod_mime.c. - CVE-2017-7679 Checksums-Sha1: 2d2036f422738e8338e8dbf10032f3eca7b5f72f 1462 libapache2-mod-proxy-html_2.4.7-1ubuntu4.16_powerpc.deb f9e7b356a599a9b35307617589862b633be59055 1452 libapache2-mod-macro_2.4.7-1ubuntu4.16_powerpc.deb f60a897a1369a25946ee2111762261141434774d 87634 apache2_2.4.7-1ubuntu4.16_powerpc.deb d35346259a6e5dbb49406613ef892604e82ded7e 742592 apache2-bin_2.4.7-1ubuntu4.16_powerpc.deb 7a017a0a9489ac923d6b4fdc46f4aac612449ca5 1462 apache2-mpm-worker_2.4.7-1ubuntu4.16_powerpc.deb a39ff30f9e152dadd1373dc6265a23f6137d2d55 1460 apache2-mpm-prefork_2.4.7-1ubuntu4.16_powerpc.deb 0ed6a5f48bdefe458cf9d3b3981debd1ea88c95f 1462 apache2-mpm-event_2.4.7-1ubuntu4.16_powerpc.deb 3d533bdde89e75f4096c18724607c4ea2f93a8bd 1458 apache2-mpm-itk_2.4.7-1ubuntu4.16_powerpc.deb 9bed5bcd9a42c9d7115466fd49b8bef87b8e6713 1480 apache2.2-bin_2.4.7-1ubuntu4.16_powerpc.deb 9bbab32ffc127f9eba77911a6c928841d761cf10 83522 apache2-utils_2.4.7-1ubuntu4.16_powerpc.deb fca3433479134d1ed44ca1d3856f7d8a0b5e85bd 1440 apache2-suexec_2.4.7-1ubuntu4.16_powerpc.deb 3505707e724b798e9d916cc89bac7a94d085ce98 13474 apache2-suexec-pristine_2.4.7-1ubuntu4.16_powerpc.deb 22fd4739c434115900475115fe4e74a63b3c44b0 15000 apache2-suexec-custom_2.4.7-1ubuntu4.16_powerpc.deb 17dba69ca699aefdc4e234c6fbc2ee06d37b8864 166798 apache2-dev_2.4.7-1ubuntu4.16_powerpc.deb da0dcc3f2ee7c0502c26b19c9e07d2a16de174ca 1949886 apache2-dbg_2.4.7-1ubuntu4.16_powerpc.deb 479ab83729d66a285acdc96248c2e58c7f862790 1843446 apache2-bin-dbgsym_2.4.7-1ubuntu4.16_powerpc.ddeb cd5d3d0839ba6058be3a0c2bea3424f10171ea56 97614 apache2-utils-dbgsym_2.4.7-1ubuntu4.16_powerpc.ddeb 052b4f711740b83f4893188f0b5d37f900ce8124 9436 apache2-suexec-pristine-dbgsym_2.4.7-1ubuntu4.16_powerpc.ddeb 943b3714f4034594dcadc3b183cb61ff18fc09bc 10548 apache2-suexec-custom-dbgsym_2.4.7-1ubuntu4.16_powerpc.ddeb Checksums-Sha256: 0c9c5b4e8adaf04b4cb9ceee510b3da0bd21c0502dec0553ae681572032d845b 1462 libapache2-mod-proxy-html_2.4.7-1ubuntu4.16_powerpc.deb ac96aa5a32105895a8962391d8584dcea8b61c140b7a2c5970000c41e8004c1b 1452 libapache2-mod-macro_2.4.7-1ubuntu4.16_powerpc.deb 8a5633edf1074b4f646774a64204568898bedebf300394e26756c8243a043de3 87634 apache2_2.4.7-1ubuntu4.16_powerpc.deb 41c6b1ea1cf30ab2732414bec4718b962c3d9dc9edd8b09494364ba01b1427c3 742592 apache2-bin_2.4.7-1ubuntu4.16_powerpc.deb ef5060ed9de05df55a7686d75e8a53b5750119da5c4850ea28efb35cd4b977a7 1462 apache2-mpm-worker_2.4.7-1ubuntu4.16_powerpc.deb 9154376de7a5dd094b604586c757ebeee3f13e4dba1a9fbc0d45db3af15c84ee 1460 apache2-mpm-prefork_2.4.7-1ubuntu4.16_powerpc.deb 3b5e4c033a910330976bacf638c4a75f9b856cd8da6c31fc7857ca91d3e680f1 1462 apache2-mpm-event_2.4.7-1ubuntu4.16_powerpc.deb 21bfcf3a475786cdebf6ecd51bc6cb5829f04747ca7abf57833b43331f312806 1458 apache2-mpm-itk_2.4.7-1ubuntu4.16_powerpc.deb ceeb26c3795c0d68e672dca7f7b18ae39567adf290b3b266b6772399391f8c92 1480 apache2.2-bin_2.4.7-1ubuntu4.16_powerpc.deb deeb204085d6bf5f71c2bd23335b80d1a258cff221b5779d647ad38813799030 83522 apache2-utils_2.4.7-1ubuntu4.16_powerpc.deb 3a89590073bfd2ac3ea0be92b4f7d980968a4cda88f1d9c189135ab708e646f2 1440 apache2-suexec_2.4.7-1ubuntu4.16_powerpc.deb 81b46768478b1a65363c9bc739961b2043c433dbed01c1b1ef31fc77e667abc2 13474 apache2-suexec-pristine_2.4.7-1ubuntu4.16_powerpc.deb 4ead14011e9a912a33e9048fcb616c005dce69b2e9ba50b2bdfdc54b67767d2f 15000 apache2-suexec-custom_2.4.7-1ubuntu4.16_powerpc.deb 96c8633b363b5fbb84dece5565b61bdd4f726e24c01f9b8227784920f188995e 166798 apache2-dev_2.4.7-1ubuntu4.16_powerpc.deb 8b83584b0aa24cbb59c7ca763612bc5920f51bad05e8b0f015b52a8f6783cc7c 1949886 apache2-dbg_2.4.7-1ubuntu4.16_powerpc.deb 92e06f9b7c8b216050107f0820e029f8665fc3e51ecfae303560f48303d01d33 1843446 apache2-bin-dbgsym_2.4.7-1ubuntu4.16_powerpc.ddeb f1563005695bb58016aa188f3a3e40f9f7e82dd263a36df95975adfa46e06418 97614 apache2-utils-dbgsym_2.4.7-1ubuntu4.16_powerpc.ddeb 5ff02a540a3f23b2c780df1085435c36f0eb443ddc10636cd2bd2bcb723080fb 9436 apache2-suexec-pristine-dbgsym_2.4.7-1ubuntu4.16_powerpc.ddeb 198a58f6b98a5d5ef1dd77d34f7022fc772b87648c687f369c1f832e44b3ce3a 10548 apache2-suexec-custom-dbgsym_2.4.7-1ubuntu4.16_powerpc.ddeb Files: e1fd93c2a8bea8bfa51c0705795c4190 1462 oldlibs extra libapache2-mod-proxy-html_2.4.7-1ubuntu4.16_powerpc.deb c5d29b3052a68ec1b8cef7ae70a52b03 1452 oldlibs extra libapache2-mod-macro_2.4.7-1ubuntu4.16_powerpc.deb a71cefca56f3912d27f94ca202ee396d 87634 httpd optional apache2_2.4.7-1ubuntu4.16_powerpc.deb 2cf2ddf1aeeca8e12e553c82f77e4c07 742592 httpd optional apache2-bin_2.4.7-1ubuntu4.16_powerpc.deb 0ff2ed23bef437b3e65f14a5fe41abbc 1462 oldlibs extra apache2-mpm-worker_2.4.7-1ubuntu4.16_powerpc.deb dc61b5222caa373fcfe71b795a0d23f2 1460 oldlibs extra apache2-mpm-prefork_2.4.7-1ubuntu4.16_powerpc.deb c2512cf7e63b958138d74f4e0241d534 1462 oldlibs extra apache2-mpm-event_2.4.7-1ubuntu4.16_powerpc.deb 22f69b1fbf8feb743a9d28a6f0f96440 1458 oldlibs extra apache2-mpm-itk_2.4.7-1ubuntu4.16_powerpc.deb aa0bb42df9c5ccc70a05b173c8faec33 1480 oldlibs extra apache2.2-bin_2.4.7-1ubuntu4.16_powerpc.deb 124ebe0ca8daef91e511f33398261b96 83522 httpd optional apache2-utils_2.4.7-1ubuntu4.16_powerpc.deb 38dd126bca1c127862ae0428d5febfd8 1440 oldlibs extra apache2-suexec_2.4.7-1ubuntu4.16_powerpc.deb 1b349359ebd4e7831389cc016d59ce2f 13474 httpd optional apache2-suexec-pristine_2.4.7-1ubuntu4.16_powerpc.deb 8a0c8953996c0504c874eba779831527 15000 httpd extra apache2-suexec-custom_2.4.7-1ubuntu4.16_powerpc.deb 4f175e63eb896e2db090e9e0ba2d0e42 166798 httpd optional apache2-dev_2.4.7-1ubuntu4.16_powerpc.deb 513dad064b0f6bf79fb9b23dfbf3867a 1949886 debug extra apache2-dbg_2.4.7-1ubuntu4.16_powerpc.deb a0456ec7c42a71adc9750fc32883ba87 1843446 httpd extra apache2-bin-dbgsym_2.4.7-1ubuntu4.16_powerpc.ddeb f7160b88cddea401e016c3578b93c7c9 97614 httpd extra apache2-utils-dbgsym_2.4.7-1ubuntu4.16_powerpc.ddeb 2ed10cddc3e5b2803fe47cadee506ac1 9436 httpd extra apache2-suexec-pristine-dbgsym_2.4.7-1ubuntu4.16_powerpc.ddeb 110ecd3e1a6ef12cb8f4155c6f13770d 10548 httpd extra apache2-suexec-custom-dbgsym_2.4.7-1ubuntu4.16_powerpc.ddeb Original-Maintainer: Debian Apache Maintainers