Format: 1.8 Date: Wed, 12 Aug 2020 17:35:50 -0400 Source: apache2 Binary: apache2 apache2-data apache2-bin apache2-utils apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-dbg Architecture: armhf Version: 2.4.18-2ubuntu3.17 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dbg - Apache debugging symbols apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) Changes: apache2 (2.4.18-2ubuntu3.17) xenial-security; urgency=medium . * SECURITY UPDATE: mod_rewrite redirect issue - debian/patches/CVE-2020-1927-1.patch: factor out default regex flags in include/ap_regex.h, server/core.c, server/util_pcre.c. - debian/patches/CVE-2020-1927-2.patch: add AP_REG_NO_DEFAULT to allow opt-out of pcre defaults in include/ap_regex.h, modules/filters/mod_substitute.c, server/util_pcre.c, server/util_regex.c. - CVE-2020-1927 * SECURITY UPDATE: mod_proxy_ftp uninitialized memory issue - debian/patches/CVE-2020-1934.patch: trap bad FTP responses in modules/proxy/mod_proxy_ftp.c. - CVE-2020-1934 Checksums-Sha1: 648a10e9e9511c5bb79888c88cc91a7b19884ecd 992 apache2-bin-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb b833c3d28f509b4a2c5326bb1d2eae3b06360a16 824532 apache2-bin_2.4.18-2ubuntu3.17_armhf.deb e02d4b3ebf9a870e49b5d0544834e0a436be1e78 2001068 apache2-dbg_2.4.18-2ubuntu3.17_armhf.deb d9040e1a1070f034cf1b15e6c9c1fd1bb721161c 972 apache2-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb e0bb615fcf0eeae2b0413671aa4702b5a9890ae5 1112 apache2-dev-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb 04a5d7c7a005246c8adf621029203726714a42f9 173346 apache2-dev_2.4.18-2ubuntu3.17_armhf.deb 4a4585a043737892934cc990673956ce5564d99a 978 apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb 6bd38b33d2a500caf00ece376fe154e0cf2e048e 14682 apache2-suexec-custom_2.4.18-2ubuntu3.17_armhf.deb cfdc5800d87c5915f3603cd92052f90632423b68 916 apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb ab3bb80bfeb788f2a1d805b8d00b79f7530943b4 13262 apache2-suexec-pristine_2.4.18-2ubuntu3.17_armhf.deb 59855666dfc6224c86d501a15507e8c650638887 1190 apache2-utils-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb ab9b3a0de4cc990a6bd8da83c6bc6811e171aea5 84240 apache2-utils_2.4.18-2ubuntu3.17_armhf.deb ebde847e11f4de30079882c2e5217df934942939 86876 apache2_2.4.18-2ubuntu3.17_armhf.deb Checksums-Sha256: 30aa29812e2783bf1068f52be712a1d40763880f6a8febe4760f7d2b783d4e4c 992 apache2-bin-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb a1cd6495a3ff23b764df64980f85af172019c1dc7213f8c43ddd4c841c0c2604 824532 apache2-bin_2.4.18-2ubuntu3.17_armhf.deb 24d31adf9a22d810309e65785493b15c4d2b6517e5bdf886c64d56eb363a7687 2001068 apache2-dbg_2.4.18-2ubuntu3.17_armhf.deb cb76b322e72e6505a7d0697a6c832227cbc9dc31b7d30bac26a776feb21679b1 972 apache2-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb 96088edea7f451f8d78a5b224ffa063ecd2a6aea7de7b81f9909c3d8f5f58fbe 1112 apache2-dev-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb 9642da0a0b966c1f8a92b8f98cb46df75a5f8b3cc9635296cc057e08ee171998 173346 apache2-dev_2.4.18-2ubuntu3.17_armhf.deb 7d6a5be218bb210c5ddec29edccd372cd4731848c423dc677206d9dd43d14c62 978 apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb f6a25c7c76a2e384bd818446034457f5aacd1e789b985499ce9ca498651cfe23 14682 apache2-suexec-custom_2.4.18-2ubuntu3.17_armhf.deb 5b5dce4a1f87d4ee1098ad0af283370ca57010eed40fe188316be0152532a846 916 apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb 1af4b960fdb846f18e942fca75cc539e328540c9f4467d0eb2c04739165a42fa 13262 apache2-suexec-pristine_2.4.18-2ubuntu3.17_armhf.deb c50764d7e26080278707f391d0873c0681b39a56ac77c7e6fd882d741953227f 1190 apache2-utils-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb e77e61c4fc4fdeb00ac5f320553f2acd4b275f8f7a5c924db2d4a9eb77fc6b4b 84240 apache2-utils_2.4.18-2ubuntu3.17_armhf.deb 8654344f42e1bcda2af27df38c62602b47119c3c6993c24dcd77f1d39696ced8 86876 apache2_2.4.18-2ubuntu3.17_armhf.deb Files: ea9b75d3d349f69f4caef67a0f9c8ec8 992 httpd extra apache2-bin-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb 178981e17f154db16eb6d172416ee8ea 824532 httpd optional apache2-bin_2.4.18-2ubuntu3.17_armhf.deb 00ac3cd3d1ac0b17ad2e2209e55c4792 2001068 debug extra apache2-dbg_2.4.18-2ubuntu3.17_armhf.deb 2564a7b70d2b65a75e6e7154867e79e7 972 httpd extra apache2-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb 6326c5b5f22553ade935afa9774308e2 1112 httpd extra apache2-dev-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb 5d398a874ff83b52d57d0714549def4f 173346 httpd optional apache2-dev_2.4.18-2ubuntu3.17_armhf.deb 7d88775df4ceb3c113965b8eaa6ec673 978 httpd extra apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb 2710cbf3c9e6ecd19111fbc1691df2b4 14682 httpd extra apache2-suexec-custom_2.4.18-2ubuntu3.17_armhf.deb 4ca12b5368e41b8f069892011f82084f 916 httpd extra apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb be9f83441f09b5d3a1e3adc9e09adbad 13262 httpd optional apache2-suexec-pristine_2.4.18-2ubuntu3.17_armhf.deb 9f92ca29070251ec8c892c5928a1ca0f 1190 httpd extra apache2-utils-dbgsym_2.4.18-2ubuntu3.17_armhf.ddeb ccea0fd19aa473a35d2c25e51a9ec0d5 84240 httpd optional apache2-utils_2.4.18-2ubuntu3.17_armhf.deb 50715474fe10271b1b9ed47e00fab4bf 86876 httpd optional apache2_2.4.18-2ubuntu3.17_armhf.deb Original-Maintainer: Debian Apache Maintainers