Format: 1.8 Date: Mon, 26 Aug 2019 06:43:29 -0700 Source: apache2 Binary: apache2 apache2-data apache2-bin apache2-utils apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-dbg Architecture: i386 Version: 2.4.18-2ubuntu3.12 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Steve Beattie Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dbg - Apache debugging symbols apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) Changes: apache2 (2.4.18-2ubuntu3.12) xenial-security; urgency=medium . * SECURITY UPDATE: Limited cross-site scripting in mod_proxy error page. - d/p/CVE-2019-10092-1.patch: Remove request details from built-in error documents. - d/p/CVE-2019-10092-2.patch: Add missing log numbers. - d/p/CVE-2019-10092-3.patch: mod_proxy: Improve XSRF/XSS protection. - CVE-2019-10092 * SECURITY UPDATE: mod_rewrite potential open redirect. - d/p/CVE-2019-10098.patch: Set PCRE_DOTALL by default. - CVE-2019-10098 Checksums-Sha1: 0d4e3f2a98f313bebcdf6de48bf096b0ddd27019 994 apache2-bin-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb 289f6c81dfc24ffc79a7a20c22f2e36c85fd6d29 988408 apache2-bin_2.4.18-2ubuntu3.12_i386.deb ef2f630380b60f42cf0ed4569a130a395ea0e8d1 1777294 apache2-dbg_2.4.18-2ubuntu3.12_i386.deb 3d751431978dd10a0996f906692c75260c66e9a1 976 apache2-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb d6dec56758e72e41116c0668aeaa3de33255c3f6 1114 apache2-dev-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb 6a9dd8f533b30bcd3b28f5a32cf6b663206a17e5 173094 apache2-dev_2.4.18-2ubuntu3.12_i386.deb e90db9bf625ddcf5cfc8b1b290353254f89cff16 980 apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb cc8ea3b7025d53d892b82949cb0c419ecb8af19a 15078 apache2-suexec-custom_2.4.18-2ubuntu3.12_i386.deb e64c7bdd436b8966c8037523c94cafcdb5c50e06 922 apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb 5c117ee6df5209ce81245941a3bf5b18c974d58b 13580 apache2-suexec-pristine_2.4.18-2ubuntu3.12_i386.deb 5c9feb166bbfc66ad33f7fe365acebdc49c4cebc 1196 apache2-utils-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb 88450a2809ee0ce3ebb65290e287a584ca1c0366 86916 apache2-utils_2.4.18-2ubuntu3.12_i386.deb 43adcd45bb652eab09f164643effc8c946e27491 86596 apache2_2.4.18-2ubuntu3.12_i386.deb Checksums-Sha256: 7216b14889473c834b2eeee9f24ba04d506c7550c901b89d8863f2200ce82221 994 apache2-bin-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb a8796eccbea8a88313199574779465ccf99279639e9e78daf14a1263e84d8ff3 988408 apache2-bin_2.4.18-2ubuntu3.12_i386.deb 26ccbc45563e22e44224eb8d50b22a61406aabbde09cedcab63e85bee3743cea 1777294 apache2-dbg_2.4.18-2ubuntu3.12_i386.deb fa79abbcfeb81d0073fa1339e69965ff8f4a5626f65fdbdf7ee55d522c2825b8 976 apache2-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb d389db97e46c53ca4e9d72edc2015004f0e73b2b5e3c1c3dd934712536875053 1114 apache2-dev-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb f1c0fd273f97d2ee3925f5f82e5b5efa9ac0257debd807f0becda5a87e777dae 173094 apache2-dev_2.4.18-2ubuntu3.12_i386.deb 5d08087a276dea6f84da52bbd2a3adc5b1124f626393c1d9c0d8fe8f802d629c 980 apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb f31a14fde88d1f5687a38d6b6fee1a47641d293d92350f8dc7133de9d4097db0 15078 apache2-suexec-custom_2.4.18-2ubuntu3.12_i386.deb d885027d7b8cb1cb3a8d23721005b0525d0932e602f351a92093d858b1cf21b4 922 apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb df33140079a257a733891af7e077771dfbbd9969296c80d38be73509fb41b5c9 13580 apache2-suexec-pristine_2.4.18-2ubuntu3.12_i386.deb 3bec957e6802434ed993f08441801e9cd3a7d224fc489d9a283c5b885b92b0b2 1196 apache2-utils-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb 25d28fef14ee1f52ecd995f206de76e68eff40fca18297384c35872b6e038388 86916 apache2-utils_2.4.18-2ubuntu3.12_i386.deb 81c402dffdda59c9688de6b733592385bb7081ca26d0c9b415eb61e2461f9321 86596 apache2_2.4.18-2ubuntu3.12_i386.deb Files: 644420412ae7e26b7a550ab4a0ff6de2 994 httpd extra apache2-bin-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb 4f523bad36714b11058c601d465d3275 988408 httpd optional apache2-bin_2.4.18-2ubuntu3.12_i386.deb e5251580b9cf4516a343e4f14f44887a 1777294 debug extra apache2-dbg_2.4.18-2ubuntu3.12_i386.deb 5b0cf467fb1a8d3a9adb1dfc72eba4fe 976 httpd extra apache2-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb a4cf6d561228b6e987e53eeb6131d5d5 1114 httpd extra apache2-dev-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb 448d9d34ddea2397356ce318355073ba 173094 httpd optional apache2-dev_2.4.18-2ubuntu3.12_i386.deb e6fd117bdae50beb24a75f86a611bc4f 980 httpd extra apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb b8fe1ce54cb75a72c62c5e8c02f1747f 15078 httpd extra apache2-suexec-custom_2.4.18-2ubuntu3.12_i386.deb 48fb55ffec15249c2f06b996281be206 922 httpd extra apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb bb2ebf283e0d3777a44fecd88ea5d2a8 13580 httpd optional apache2-suexec-pristine_2.4.18-2ubuntu3.12_i386.deb cc0fa32c581bfe7e20ebf2cd995d9d7f 1196 httpd extra apache2-utils-dbgsym_2.4.18-2ubuntu3.12_i386.ddeb 9e0ec99becc9f5656100e22e3d46a8f3 86916 httpd optional apache2-utils_2.4.18-2ubuntu3.12_i386.deb 371cc69350cc6e327c924927530bd96f 86596 httpd optional apache2_2.4.18-2ubuntu3.12_i386.deb Original-Maintainer: Debian Apache Maintainers