Format: 1.8 Date: Wed, 03 Apr 2019 10:37:52 -0400 Source: apache2 Binary: apache2 apache2-data apache2-bin apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-mpm-itk apache2.2-bin libapache2-mod-proxy-html libapache2-mod-macro apache2-utils apache2-suexec apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-dbg Architecture: arm64 Version: 2.4.7-1ubuntu4.22 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (binary files and modules) apache2-data - Apache HTTP Server (common files) apache2-dbg - Apache debugging symbols apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-mpm-event - transitional event MPM package for apache2 apache2-mpm-itk - transitional itk MPM package for apache2 apache2-mpm-prefork - transitional prefork MPM package for apache2 apache2-mpm-worker - transitional worker MPM package for apache2 apache2-suexec - transitional package for apache2-suexec-pristine apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) apache2.2-bin - Transitional package for apache2-bin libapache2-mod-macro - Transitional package for apache2-bin libapache2-mod-proxy-html - Transitional package for apache2-bin Changes: apache2 (2.4.7-1ubuntu4.22) trusty-security; urgency=medium . * SECURITY UPDATE: mod_session expiry time issue - debian/patches/CVE-2018-17199-pre1.patch: properly handle sessions that could not be decoded in modules/session/mod_session.c. - debian/patches/CVE-2018-17199.patch: always decode session attributes early in modules/session/mod_session.c. - CVE-2018-17199 * SECURITY UPDATE: mod_auth_digest access control bypass - debian/patches/CVE-2019-0217.patch: fix a race condition in modules/aaa/mod_auth_digest.c. - CVE-2019-0217 * SECURITY UPDATE: URL normalization inconsistincy - debian/patches/CVE-2019-0220-1.patch: merge consecutive slashes in the path in include/http_core.h, include/httpd.h, server/core.c, server/request.c, server/util.c. - debian/patches/CVE-2019-0220-2.patch: fix r->parsed_uri.path safety in server/request.c, server/util.c. - debian/patches/CVE-2019-0220-3.patch: maintainer mode fix in server/util.c. - CVE-2019-0220 Checksums-Sha1: 81479aeed389a46ab0d37b6180148b5c3688d640 1458 libapache2-mod-proxy-html_2.4.7-1ubuntu4.22_arm64.deb e1228ac702c3aca0bbf60a5e779654dffc47a716 1446 libapache2-mod-macro_2.4.7-1ubuntu4.22_arm64.deb af4ec048d5828847466a0cd8a2dc1c5452763fc7 87114 apache2_2.4.7-1ubuntu4.22_arm64.deb ce59bbf5e9735e1469748b6616b54ca6c6019c97 707250 apache2-bin_2.4.7-1ubuntu4.22_arm64.deb 2711847870e2051b3def363a918a0d0f856b07d1 1456 apache2-mpm-worker_2.4.7-1ubuntu4.22_arm64.deb c16eb389d4578ce12036974ccf9f7ca0c2fe2532 1456 apache2-mpm-prefork_2.4.7-1ubuntu4.22_arm64.deb 0ee3ac8b6e0376382a6b5a3bbbea06a8ca91e60e 1452 apache2-mpm-event_2.4.7-1ubuntu4.22_arm64.deb 3c677f6a5b2150c8710f8f147051ca500b6cb3ee 1454 apache2-mpm-itk_2.4.7-1ubuntu4.22_arm64.deb 053a90ced445dc8c0e8c397a6cd1fba5d1d8e5f6 1474 apache2.2-bin_2.4.7-1ubuntu4.22_arm64.deb b9fb562df12c4748d5eef79af5b4bb425fb301c0 77190 apache2-utils_2.4.7-1ubuntu4.22_arm64.deb de551f3f7c82417e59382e2b32aa84723c09024c 1434 apache2-suexec_2.4.7-1ubuntu4.22_arm64.deb 966db752548a0ca1fdac08f699ccd1dcd8c800be 13430 apache2-suexec-pristine_2.4.7-1ubuntu4.22_arm64.deb b1d88d4f3a5b1ed2577f680bad49d4f299068ffa 14912 apache2-suexec-custom_2.4.7-1ubuntu4.22_arm64.deb 73d27abf6de6e8073dc624aca3d8c1d286c62b38 167874 apache2-dev_2.4.7-1ubuntu4.22_arm64.deb 2952e1555b2c0ac80ba74c31131e3ef3d237f327 2008182 apache2-dbg_2.4.7-1ubuntu4.22_arm64.deb edf5d9ddbca43b1006cc03fff034fcba9739b0aa 1899734 apache2-bin-dbgsym_2.4.7-1ubuntu4.22_arm64.ddeb a9e97e6a2bc27ee4fa219f2845128bdc90106343 99198 apache2-utils-dbgsym_2.4.7-1ubuntu4.22_arm64.ddeb d1c80276039f475df9d70445205dd4c617d2d2a1 9604 apache2-suexec-pristine-dbgsym_2.4.7-1ubuntu4.22_arm64.ddeb c03e74398d72f01b71964fc9a71312805c0083dd 10592 apache2-suexec-custom-dbgsym_2.4.7-1ubuntu4.22_arm64.ddeb Checksums-Sha256: db5d17e3c5f8723e243a627e482687ecfd5d0b40b016467f970847e58ae6825d 1458 libapache2-mod-proxy-html_2.4.7-1ubuntu4.22_arm64.deb 76ee6a9a0ffca8abdf913c669b31e4dbc9ce1be54a0fea37043554bb00335594 1446 libapache2-mod-macro_2.4.7-1ubuntu4.22_arm64.deb 6c25e5343676480fb23d070269016dca2a83af10339bff771165c1f757970c1e 87114 apache2_2.4.7-1ubuntu4.22_arm64.deb 14642daf4b21cda77c739aefd023017ba4a441b20aa4591ec0312395ba32e010 707250 apache2-bin_2.4.7-1ubuntu4.22_arm64.deb c87a49b25a29b12e757420e6af8517f63f9a1e509a8f1b08ee2d12f4d750d8e0 1456 apache2-mpm-worker_2.4.7-1ubuntu4.22_arm64.deb c97916d1bcb452f5d40b836edf732529e1a567126300bfdc6779d50805bb1788 1456 apache2-mpm-prefork_2.4.7-1ubuntu4.22_arm64.deb e632a20c5c1b499f4cf32c6df63413fc5b39f1ed661dff0631346cd16401ee5b 1452 apache2-mpm-event_2.4.7-1ubuntu4.22_arm64.deb da77bdbc7cc5e62aaa9a5074c77d40976c94e8e5c37c467a23fa6ba8755bdc32 1454 apache2-mpm-itk_2.4.7-1ubuntu4.22_arm64.deb 1f78978a13df61c0c7bfc676bddc8fc39230332a4205b6310445121bea6ce70a 1474 apache2.2-bin_2.4.7-1ubuntu4.22_arm64.deb e4ee3217ac9379fbbddb8568b1d4cf660b509e1f17eab214b7309989ef3c584a 77190 apache2-utils_2.4.7-1ubuntu4.22_arm64.deb 8c1c342ed7b26aa7d3674eecf4d494988a18f4936a43d7dd981ee4302bfc55e4 1434 apache2-suexec_2.4.7-1ubuntu4.22_arm64.deb c3116992ccaa3b62d81ad3343e3d87b14f6e29119eeb1e63b7d59f83efe205b0 13430 apache2-suexec-pristine_2.4.7-1ubuntu4.22_arm64.deb e9651b6a9239197af93d25b0db487a9dc9071ba976d7fabedb484b3ca8da0d88 14912 apache2-suexec-custom_2.4.7-1ubuntu4.22_arm64.deb 6f449e41927a2b7edb15c029e5c1b37c560d72cff1314a018753055ee58c6bd4 167874 apache2-dev_2.4.7-1ubuntu4.22_arm64.deb 586e4aa17eea97d0dd9296b58b237ee29515a93ed2653b017a81976bafda21ad 2008182 apache2-dbg_2.4.7-1ubuntu4.22_arm64.deb 0926837f46958dcb0e3fc78642079c02ca07633615ba49dc367455c955e8ffb4 1899734 apache2-bin-dbgsym_2.4.7-1ubuntu4.22_arm64.ddeb a7eea166ad3e40ece45beac9f658a5610c6e1c213f32d822e31f551fd7936236 99198 apache2-utils-dbgsym_2.4.7-1ubuntu4.22_arm64.ddeb 82612ca1fc0a5ba31735c49c817b9ecd38dbbeca0f51ab041859978855ef58d2 9604 apache2-suexec-pristine-dbgsym_2.4.7-1ubuntu4.22_arm64.ddeb a6a053d9ad47b48ea2f47d05704dd1816975f6791679b6f1a494e4f42b606f07 10592 apache2-suexec-custom-dbgsym_2.4.7-1ubuntu4.22_arm64.ddeb Files: 66aa505584c62fead708045b43df9382 1458 oldlibs extra libapache2-mod-proxy-html_2.4.7-1ubuntu4.22_arm64.deb 26fe94873ccfb22c8487642fb0484ee7 1446 oldlibs extra libapache2-mod-macro_2.4.7-1ubuntu4.22_arm64.deb 628371228af8958764d61ff9c8bf61d9 87114 httpd optional apache2_2.4.7-1ubuntu4.22_arm64.deb df4245ae1f89700f9e1723c9d5db3fe5 707250 httpd optional apache2-bin_2.4.7-1ubuntu4.22_arm64.deb 652336d6ffba5fc4f2c1741becf1faed 1456 oldlibs extra apache2-mpm-worker_2.4.7-1ubuntu4.22_arm64.deb e90edb7f35fed3fb028e6525a31c1404 1456 oldlibs extra apache2-mpm-prefork_2.4.7-1ubuntu4.22_arm64.deb e5eeaae0ff4c6442f57c05163dd56e97 1452 oldlibs extra apache2-mpm-event_2.4.7-1ubuntu4.22_arm64.deb 799025adf5034f5cf4d81b8529400547 1454 oldlibs extra apache2-mpm-itk_2.4.7-1ubuntu4.22_arm64.deb 33c729117ce6ae9b2ad0554ba7d0ba00 1474 oldlibs extra apache2.2-bin_2.4.7-1ubuntu4.22_arm64.deb 46ec3010a9e3954295cb09148270492d 77190 httpd optional apache2-utils_2.4.7-1ubuntu4.22_arm64.deb 706aaa829635c71feb0f81ceb46215db 1434 oldlibs extra apache2-suexec_2.4.7-1ubuntu4.22_arm64.deb db37afe938f3ae4d00ad295e5c8e8978 13430 httpd optional apache2-suexec-pristine_2.4.7-1ubuntu4.22_arm64.deb b1a18cb79a7e5532495bc4bfb518ae49 14912 httpd extra apache2-suexec-custom_2.4.7-1ubuntu4.22_arm64.deb 0caa8477f6b14f4427f2e91552fe95b8 167874 httpd optional apache2-dev_2.4.7-1ubuntu4.22_arm64.deb 22918ad32b764800a7653e618faad261 2008182 debug extra apache2-dbg_2.4.7-1ubuntu4.22_arm64.deb 882122202d1f4f8cb211856e15e911a2 1899734 httpd extra apache2-bin-dbgsym_2.4.7-1ubuntu4.22_arm64.ddeb 7ce2e0ce5d8b99f6e86cc9c74792e251 99198 httpd extra apache2-utils-dbgsym_2.4.7-1ubuntu4.22_arm64.ddeb 60b14792a2cf087a46fa265cd340bc11 9604 httpd extra apache2-suexec-pristine-dbgsym_2.4.7-1ubuntu4.22_arm64.ddeb 9596425c9445b0541a490f4a21ed06bd 10592 httpd extra apache2-suexec-custom-dbgsym_2.4.7-1ubuntu4.22_arm64.ddeb Original-Maintainer: Debian Apache Maintainers