Format: 1.8 Date: Mon, 26 Aug 2019 06:43:29 -0700 Source: apache2 Binary: apache2 apache2-data apache2-bin apache2-utils apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-dbg Architecture: arm64 Version: 2.4.18-2ubuntu3.12 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Steve Beattie Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dbg - Apache debugging symbols apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) Changes: apache2 (2.4.18-2ubuntu3.12) xenial-security; urgency=medium . * SECURITY UPDATE: Limited cross-site scripting in mod_proxy error page. - d/p/CVE-2019-10092-1.patch: Remove request details from built-in error documents. - d/p/CVE-2019-10092-2.patch: Add missing log numbers. - d/p/CVE-2019-10092-3.patch: mod_proxy: Improve XSRF/XSS protection. - CVE-2019-10092 * SECURITY UPDATE: mod_rewrite potential open redirect. - d/p/CVE-2019-10098.patch: Set PCRE_DOTALL by default. - CVE-2019-10098 Checksums-Sha1: 0d600efbd9da866438e6705d8e759e13f6a3a6fd 992 apache2-bin-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb 3350c6186338bb2aed56331dd7c77586d161e578 771014 apache2-bin_2.4.18-2ubuntu3.12_arm64.deb f1745406d56766641e7e68457854273fcd7b6699 2059852 apache2-dbg_2.4.18-2ubuntu3.12_arm64.deb b8ab5601d70a5ac2435081a52ed8102870482cb3 972 apache2-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb 7f51239c08bf6d05045346397fd141c4c55809bb 1112 apache2-dev-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb 740ae5d3b663459d9b349d973ed72a461840d3f0 173628 apache2-dev_2.4.18-2ubuntu3.12_arm64.deb 22802a8325048c36efe8826434d29265991c0a0c 978 apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb fb550bd21599279e20fe4f6bce59f9a55f5bbdc6 14968 apache2-suexec-custom_2.4.18-2ubuntu3.12_arm64.deb 80b41570e673d966ceeef621a7e8faf7c9525eec 920 apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb f8b708f819b6d2e410573053bde0820abfcdfaa9 13470 apache2-suexec-pristine_2.4.18-2ubuntu3.12_arm64.deb 9d95199eb3b19bdd2397ca8976bb509043ecc7f4 1194 apache2-utils-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb 8f69422fb673f0a2786002eb6cdb478a3e6c91d4 78598 apache2-utils_2.4.18-2ubuntu3.12_arm64.deb ac56e2672a78d3065726e0eaec07e7a38af25b93 86676 apache2_2.4.18-2ubuntu3.12_arm64.deb Checksums-Sha256: 0c8cfe698825fdab9577660be5cfa3bd08b08cfce39f4bd7a00ef06668c515cf 992 apache2-bin-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb 66afaa7db9e66245f163355cec71fec2e9e5ca4d0dab638782cf697038524286 771014 apache2-bin_2.4.18-2ubuntu3.12_arm64.deb 79715f7634d04d92587948723c35d437f683eeb376f37821485fb87f03a5137c 2059852 apache2-dbg_2.4.18-2ubuntu3.12_arm64.deb 8fff13a9e349fdcf7ee7a37d5c2aec3a60d5f35493d782b47d47b22f0af89193 972 apache2-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb 65e8d80578e847da07701f28b4557df629c6adb10a7e8788c390cd294750c23b 1112 apache2-dev-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb 1fd96836b28c02b4e1fb21c40a99e344d072bb76f2f04220623951b25a7935f2 173628 apache2-dev_2.4.18-2ubuntu3.12_arm64.deb 1c315184841b34e4e11ac2ad888ba4e3bb651c9fec05b1faf7ee6abc76e87ac9 978 apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb 71cd5649fdcda64675bf2eaab5b8afa33d45d64d9712cbf20af123f57655bb2b 14968 apache2-suexec-custom_2.4.18-2ubuntu3.12_arm64.deb 71d70c908192239f81385b6901af38eeb0754d8c36968c645865c36f1f839ccf 920 apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb 9fa01eefcdd73055c58e926a0c0a5d1454b89c55923bfbbc573170c15617fd7d 13470 apache2-suexec-pristine_2.4.18-2ubuntu3.12_arm64.deb 0a088a3c297e2e2ffbb818e0c3452016332223470ebe97ceb90ed7210cff25b6 1194 apache2-utils-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb 0b87edd64a90aa3b6d7b2de4644eb136a6c6f767114eb1da7319336c4612d606 78598 apache2-utils_2.4.18-2ubuntu3.12_arm64.deb 5cbff1dc466eee7f9db88708c7b29c9c76f805304c7703578d7b98e8162fa4d9 86676 apache2_2.4.18-2ubuntu3.12_arm64.deb Files: ab3f8ac6aa40401f054dd0a9b79abb42 992 httpd extra apache2-bin-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb 81f944719d0d172aea2e64f881d0bcb0 771014 httpd optional apache2-bin_2.4.18-2ubuntu3.12_arm64.deb c36a496bbaaee206eb18642b8e42b92a 2059852 debug extra apache2-dbg_2.4.18-2ubuntu3.12_arm64.deb 55edd242e008a7cf295eb7118810705a 972 httpd extra apache2-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb d34cd17daa4ba040cce00827535c46b0 1112 httpd extra apache2-dev-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb bfed6d972fb9e3c30e88714d8e14e273 173628 httpd optional apache2-dev_2.4.18-2ubuntu3.12_arm64.deb 868a8c11cff3c30e87b7c9a4887c4afd 978 httpd extra apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb 0c754fb83f6314025def235533217397 14968 httpd extra apache2-suexec-custom_2.4.18-2ubuntu3.12_arm64.deb 0325a82b0a7575d8c74a2e8c7b9829c9 920 httpd extra apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb 6bfdd33b730ab36f465af779a739b416 13470 httpd optional apache2-suexec-pristine_2.4.18-2ubuntu3.12_arm64.deb e235708e455899983f64297e306556b4 1194 httpd extra apache2-utils-dbgsym_2.4.18-2ubuntu3.12_arm64.ddeb 46d26f188558314b97ef80b448af1619 78598 httpd optional apache2-utils_2.4.18-2ubuntu3.12_arm64.deb 7f8ac275c912b5b6b1dd77740a44c02c 86676 httpd optional apache2_2.4.18-2ubuntu3.12_arm64.deb Original-Maintainer: Debian Apache Maintainers