Format: 1.8 Date: Mon, 26 Aug 2019 06:43:29 -0700 Source: apache2 Binary: apache2 apache2-data apache2-bin apache2-utils apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-dbg Architecture: armhf Version: 2.4.18-2ubuntu3.12 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Steve Beattie Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dbg - Apache debugging symbols apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) Changes: apache2 (2.4.18-2ubuntu3.12) xenial-security; urgency=medium . * SECURITY UPDATE: Limited cross-site scripting in mod_proxy error page. - d/p/CVE-2019-10092-1.patch: Remove request details from built-in error documents. - d/p/CVE-2019-10092-2.patch: Add missing log numbers. - d/p/CVE-2019-10092-3.patch: mod_proxy: Improve XSRF/XSS protection. - CVE-2019-10092 * SECURITY UPDATE: mod_rewrite potential open redirect. - d/p/CVE-2019-10098.patch: Set PCRE_DOTALL by default. - CVE-2019-10098 Checksums-Sha1: 6aa574ea97a2af1cad8e1dc681a86ebb8d63694f 992 apache2-bin-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb 3a0ecc023fc779a94587b8fa46658960f547b2e1 821676 apache2-bin_2.4.18-2ubuntu3.12_armhf.deb 211fecf8335eda9c51e328a664f5364dede35146 1996680 apache2-dbg_2.4.18-2ubuntu3.12_armhf.deb 923624cfa3cbd3f11154b6e6984836458e2b60a6 972 apache2-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb 6d96f4d1186c2f488ebac083c0c2743362d5a8f3 1112 apache2-dev-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb 0b6199109b34b66b6b68df83bbb771721eba495f 173616 apache2-dev_2.4.18-2ubuntu3.12_armhf.deb 70d14635a6884beff7b7b546d84a66b3c96d33f4 978 apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb 658c2f0a3bfd2e3144941fbe8bd5e816e03b6f6a 14694 apache2-suexec-custom_2.4.18-2ubuntu3.12_armhf.deb cc7033f257ed5334c4b624a070797cbc6c1f5088 920 apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb 0ba3095956aed8e64d89da9aecd96f793ba452ea 13264 apache2-suexec-pristine_2.4.18-2ubuntu3.12_armhf.deb 153ba3d0fd72ee8ea9f43c6e20e35fea9c44a549 1194 apache2-utils-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb fb6c6f864c62022cc9e8a8bfd9633416d3e7953c 84272 apache2-utils_2.4.18-2ubuntu3.12_armhf.deb 69fff857b2a563162a4b8586c330a6eccdb00fa2 86670 apache2_2.4.18-2ubuntu3.12_armhf.deb Checksums-Sha256: ee587542db76d4b6e9c0c2b722eb398ce1d3274cf6ebc290824ae98c314699a7 992 apache2-bin-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb 624008b96f67074b45ad264d6aa2a46d45f855d5bbfe3363320447aa59ad0be5 821676 apache2-bin_2.4.18-2ubuntu3.12_armhf.deb 01e4eaec6763958cc9998a35499f5e0ca5f3d2c4b93473f81344a254666d66af 1996680 apache2-dbg_2.4.18-2ubuntu3.12_armhf.deb 5e3894d44e8736bd813048036e8f6c61778b93ef330f4b340a9e6da11fe4f8c4 972 apache2-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb 969001f4080be539a450a2926cd7bf858381edb6a5aa3c5a9bcc0672e3a2e3eb 1112 apache2-dev-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb 993298cde4e3226b5d7a55411d72bb9930f07074195d3987e79d755f0bb9a67e 173616 apache2-dev_2.4.18-2ubuntu3.12_armhf.deb 478dabe21626c2b503d42ca1faf162003093747c5e71973c267eed5daee873cb 978 apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb edcda18a03dddbb175c8a9e9894b35d1e16d6c2376bdc661c30146c6db0c061c 14694 apache2-suexec-custom_2.4.18-2ubuntu3.12_armhf.deb bcea1959f11f9bd600360bf3a37e8d0af344649fdd4d4f48ca4a3af540a1aa52 920 apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb 6fa44642317e34f9651a3dee01473d188ffc15f3c6591c8c6355e630b4276a4a 13264 apache2-suexec-pristine_2.4.18-2ubuntu3.12_armhf.deb 7530446c1baf1a3745ca57adb8dee85a2f2ce21676eb8a8d1d149b955f58abb7 1194 apache2-utils-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb 60dd89424c85139e3c07cf7787d4f8378c4360028967188448b05d3db9f8f5c6 84272 apache2-utils_2.4.18-2ubuntu3.12_armhf.deb 475c9ad1c5a4f2282276967fea56cd6d2ffdf1b248ab1eac395f847ce9d5c3b2 86670 apache2_2.4.18-2ubuntu3.12_armhf.deb Files: 4f7fbfc103a0aeb0cb62a82952f6ca0f 992 httpd extra apache2-bin-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb a6e10d806eca26aa584fc2c823116a57 821676 httpd optional apache2-bin_2.4.18-2ubuntu3.12_armhf.deb fd243a1c032aa55302cc041a1975cfaf 1996680 debug extra apache2-dbg_2.4.18-2ubuntu3.12_armhf.deb c75779d898c8f11c0bdae00144117400 972 httpd extra apache2-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb c3cebd80b89614efd72e2a5ce4468542 1112 httpd extra apache2-dev-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb a459b26abeb24944c0b013327666dafc 173616 httpd optional apache2-dev_2.4.18-2ubuntu3.12_armhf.deb f1df14768a27b0968739ba1dd53ae927 978 httpd extra apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb a6df3851eb210a661012e7949e568cd4 14694 httpd extra apache2-suexec-custom_2.4.18-2ubuntu3.12_armhf.deb 4f326f25755cea3b6664f30c7ede8579 920 httpd extra apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb 2652c5980454ab1211ba82e9e37106d0 13264 httpd optional apache2-suexec-pristine_2.4.18-2ubuntu3.12_armhf.deb 9735a9d93271dfba63b86d6c292f3499 1194 httpd extra apache2-utils-dbgsym_2.4.18-2ubuntu3.12_armhf.ddeb c3832bff1281128d4907b83f3356a4d5 84272 httpd optional apache2-utils_2.4.18-2ubuntu3.12_armhf.deb 978c7b5596ad2b495395730575c0f648 86670 httpd optional apache2_2.4.18-2ubuntu3.12_armhf.deb Original-Maintainer: Debian Apache Maintainers