Format: 1.8 Date: Wed, 08 Mar 2023 12:34:33 -0500 Source: apache2 Binary: apache2 apache2-data apache2-bin apache2-utils apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-ssl-dev apache2-dbg Architecture: s390x Version: 2.4.29-1ubuntu4.27 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dbg - Apache debugging symbols apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) Changes: apache2 (2.4.29-1ubuntu4.27) bionic-security; urgency=medium . * SECURITY UPDATE: HTTP request splitting with mod_rewrite and mod_proxy - debian/patches/CVE-2023-25690-1.patch: don't forward invalid query strings in modules/http2/mod_proxy_http2.c, modules/mappers/mod_rewrite.c, modules/proxy/mod_proxy_ajp.c, modules/proxy/mod_proxy_balancer.c, modules/proxy/mod_proxy_http.c, modules/proxy/mod_proxy_wstunnel.c. - debian/patches/CVE-2023-25690-2.patch: Fix missing APLOGNO in modules/http2/mod_proxy_http2.c. - CVE-2023-25690 Checksums-Sha1: 917ccd10dc08e67bc5d429eccfabad246a77a500 978772 apache2-bin_2.4.29-1ubuntu4.27_s390x.deb 85860abea11257f3cb861d7fa1bea490850acdd7 4084156 apache2-dbg_2.4.29-1ubuntu4.27_s390x.deb 8fcb9edf283fd0a2f12a7e4d25e0f9a3828a04e4 177268 apache2-dev_2.4.29-1ubuntu4.27_s390x.deb d899b322433afa17dce7418736cf698208223162 2396 apache2-ssl-dev_2.4.29-1ubuntu4.27_s390x.deb 6324e93f5d0a0bf8390f6c4c73b9127f242a3a4d 15100 apache2-suexec-custom_2.4.29-1ubuntu4.27_s390x.deb ff67e00a611b238cb4a3527ab6ff62d1b690d82e 13596 apache2-suexec-pristine_2.4.29-1ubuntu4.27_s390x.deb 09414a4089a1e0346be570d346fcb307c304dbe4 81240 apache2-utils_2.4.29-1ubuntu4.27_s390x.deb 3004dbd191b0e184719d272d32175dadaa15e9a0 10360 apache2_2.4.29-1ubuntu4.27_s390x.buildinfo 3457dbfabeb518a7fb4ea65187c502bcbb05902f 95144 apache2_2.4.29-1ubuntu4.27_s390x.deb Checksums-Sha256: 7e0804fff711b249111fc231e2384e8c45f749f34ed00a19b27066b10ad26765 978772 apache2-bin_2.4.29-1ubuntu4.27_s390x.deb 9a4baadb092c5bdb3815d57f890a746e0df3a8a5d599b07a42250ed00d59d459 4084156 apache2-dbg_2.4.29-1ubuntu4.27_s390x.deb 2465379f1a7f800497380421c652a96fa3e8bab27507adfac34ffddade2cd2f6 177268 apache2-dev_2.4.29-1ubuntu4.27_s390x.deb d2043dd915f3faa30ffdf00cbd9728c139e7108ba66a1fa6292c803d3e3d32bd 2396 apache2-ssl-dev_2.4.29-1ubuntu4.27_s390x.deb ecd63293a8e893f3f95a0b064c9fa7d563a19eba322e0f05e06c5a5f1b3c8aec 15100 apache2-suexec-custom_2.4.29-1ubuntu4.27_s390x.deb b1827dab72ee454483c1aa3346314a5f79780d67ea1e1110bb0158eafe82a623 13596 apache2-suexec-pristine_2.4.29-1ubuntu4.27_s390x.deb 77fb3607598a72882c03dd6129531c0da4f28827d94fe8e8211d2ea447c3c0ec 81240 apache2-utils_2.4.29-1ubuntu4.27_s390x.deb cb7d6ecb7333baadeed40592ffecbd1033d3b4a4214a3d42210736f6ec6ab6d4 10360 apache2_2.4.29-1ubuntu4.27_s390x.buildinfo b9cce948478752543372fc7cd96ae0fff75f7ee32459e92f38a2626909257776 95144 apache2_2.4.29-1ubuntu4.27_s390x.deb Files: a008419297b68b57a3e98a7e0b40d190 978772 httpd optional apache2-bin_2.4.29-1ubuntu4.27_s390x.deb 0c7d1509df734dab9399456e088c2458 4084156 debug optional apache2-dbg_2.4.29-1ubuntu4.27_s390x.deb 21c39dc20856c2df67bb5f46ba988de1 177268 httpd optional apache2-dev_2.4.29-1ubuntu4.27_s390x.deb fbef40ba1f7edd5db459de872dffd408 2396 httpd optional apache2-ssl-dev_2.4.29-1ubuntu4.27_s390x.deb 6bbc859d16300e5541f9b287e29b1114 15100 httpd optional apache2-suexec-custom_2.4.29-1ubuntu4.27_s390x.deb 6f205789eeb15060dbaaf90d5dfd4f19 13596 httpd optional apache2-suexec-pristine_2.4.29-1ubuntu4.27_s390x.deb 017b2992268b5d62654b17140b3d4db6 81240 httpd optional apache2-utils_2.4.29-1ubuntu4.27_s390x.deb 8b2d5a88c9cf391b47e64cb951f2e1dc 10360 httpd optional apache2_2.4.29-1ubuntu4.27_s390x.buildinfo d375fbc5b30b063cab7b99e8b893b216 95144 httpd optional apache2_2.4.29-1ubuntu4.27_s390x.deb Original-Maintainer: Debian Apache Maintainers