Format: 1.8 Date: Wed, 08 Mar 2023 12:32:01 -0500 Source: apache2 Binary: apache2 apache2-bin apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-pristine apache2-utils libapache2-mod-md libapache2-mod-proxy-uwsgi Built-For-Profiles: noudeb Architecture: ppc64el Version: 2.4.52-1ubuntu4.4 Distribution: jammy Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Changes: apache2 (2.4.52-1ubuntu4.4) jammy-security; urgency=medium . * SECURITY UPDATE: HTTP request splitting with mod_rewrite and mod_proxy - debian/patches/CVE-2023-25690-1.patch: don't forward invalid query strings in modules/http2/mod_proxy_http2.c, modules/mappers/mod_rewrite.c, modules/proxy/mod_proxy_ajp.c, modules/proxy/mod_proxy_balancer.c, modules/proxy/mod_proxy_http.c, modules/proxy/mod_proxy_wstunnel.c. - debian/patches/CVE-2023-25690-2.patch: Fix missing APLOGNO in modules/http2/mod_proxy_http2.c. - CVE-2023-25690 * SECURITY UPDATE: mod_proxy_uwsgi HTTP response splitting - debian/patches/CVE-2023-27522.patch: stricter backend HTTP response parsing/validation in modules/proxy/mod_proxy_uwsgi.c. - CVE-2023-27522 Checksums-Sha1: 59099ebe415338064eb7e7a8bc606f0df8a84631 3966840 apache2-bin-dbgsym_2.4.52-1ubuntu4.4_ppc64el.ddeb 3f0752fa5a66ed915672d678fa0c7c4a5481cae0 1530716 apache2-bin_2.4.52-1ubuntu4.4_ppc64el.deb ae2248a618952ca679d9d6051f13a8f3556658bd 191026 apache2-dev_2.4.52-1ubuntu4.4_ppc64el.deb 0f30df64dd7738b63fe4e4b19b268200b27410c9 2980 apache2-ssl-dev_2.4.52-1ubuntu4.4_ppc64el.deb e63cdcb60a7ab581118dbf3fb8d3d3e0c456c101 13456 apache2-suexec-custom-dbgsym_2.4.52-1ubuntu4.4_ppc64el.ddeb 2272547ddb8091e5733a0ed9b492532d68b5da1c 16438 apache2-suexec-custom_2.4.52-1ubuntu4.4_ppc64el.deb 3bb678dd52e58e55c6af28ade5788cec228fc03a 12062 apache2-suexec-pristine-dbgsym_2.4.52-1ubuntu4.4_ppc64el.ddeb 50c3738abbe73e918a001b0f63796bc38db7ce2d 14796 apache2-suexec-pristine_2.4.52-1ubuntu4.4_ppc64el.deb 4f08d6237d19572881ece1273cbc6b59f5d2742b 129672 apache2-utils-dbgsym_2.4.52-1ubuntu4.4_ppc64el.ddeb fe64ad8a5dd2817a870428d4c400e47a17b11e75 94368 apache2-utils_2.4.52-1ubuntu4.4_ppc64el.deb 700dd9f3682a527eb6f08d13236d302c35ca6af2 12019 apache2_2.4.52-1ubuntu4.4_ppc64el.buildinfo 8731e2f302119c2500b2b192722fa98460ba4723 97860 apache2_2.4.52-1ubuntu4.4_ppc64el.deb 49f10ece64acc55607604221ed298e264289dc3b 804 libapache2-mod-md_2.4.52-1ubuntu4.4_ppc64el.deb 5e945074836def16d65bbd969d03e5b2f4b804ed 986 libapache2-mod-proxy-uwsgi_2.4.52-1ubuntu4.4_ppc64el.deb Checksums-Sha256: 43ba941463b3fa99776e70e747fa89a3de078ffadd43e871fc212a25ac7d385d 3966840 apache2-bin-dbgsym_2.4.52-1ubuntu4.4_ppc64el.ddeb b7d4cb95ca91da8eb37d4faa46ee379386db916ecbeb0aac3924212134e41c2d 1530716 apache2-bin_2.4.52-1ubuntu4.4_ppc64el.deb 9682c5965555be5a988a5cccbd002f23bc3b0a5bdd60fa80177b69b690643d93 191026 apache2-dev_2.4.52-1ubuntu4.4_ppc64el.deb a5a5d57d582d3721e9ed95617fd0a564a7c99e1bbbaacf3c4998909f81fa3fe2 2980 apache2-ssl-dev_2.4.52-1ubuntu4.4_ppc64el.deb 14d302ca45d4c50a9f84cf51e85dbe1331a9da6ffa6ad586e94f112a0b8cce13 13456 apache2-suexec-custom-dbgsym_2.4.52-1ubuntu4.4_ppc64el.ddeb 7b1772b625b0cb53c54991c164e62c0c5d7a8d7468781bebed649b3abae58f7e 16438 apache2-suexec-custom_2.4.52-1ubuntu4.4_ppc64el.deb 97190fcc1d459b51006519b5f91de78927b1a9a153460a94a1befa2b33c6b948 12062 apache2-suexec-pristine-dbgsym_2.4.52-1ubuntu4.4_ppc64el.ddeb a0f3270ae12254c47ba160c5683132c0f3d9688c825c916e9ffddfe1259a4fd6 14796 apache2-suexec-pristine_2.4.52-1ubuntu4.4_ppc64el.deb 1a615882aea40a13d87a8967e4c718cf72412e2c1b6a632e8890f8e1b69ee4aa 129672 apache2-utils-dbgsym_2.4.52-1ubuntu4.4_ppc64el.ddeb dac6a9b083e782b3eac5fce3cb6a4e3eb1c40184f07050106bfb9040f536dcd6 94368 apache2-utils_2.4.52-1ubuntu4.4_ppc64el.deb 303ffa90dde510e5704e1cd22d13c2a87d89178c6abe8def0c37454abc15755c 12019 apache2_2.4.52-1ubuntu4.4_ppc64el.buildinfo a53d69f1e2f5e415906d44c95b44df3fde4cdf2e252d4f8029376b82fb9e33e8 97860 apache2_2.4.52-1ubuntu4.4_ppc64el.deb 25336197c921472f75e12e1b5451c1494c2e92255840a6bd99f21061f87dd77a 804 libapache2-mod-md_2.4.52-1ubuntu4.4_ppc64el.deb 44a3a05558003ca461caac849a8c6b6e95373b2ae0e6e0686a4bb6c39cdae207 986 libapache2-mod-proxy-uwsgi_2.4.52-1ubuntu4.4_ppc64el.deb Files: ea132c149faa8e42946eb7d0a1787e41 3966840 debug optional apache2-bin-dbgsym_2.4.52-1ubuntu4.4_ppc64el.ddeb 9cfb0985f5dcdebcdea016aa1b3e7428 1530716 httpd optional apache2-bin_2.4.52-1ubuntu4.4_ppc64el.deb c977d768f6d1d69b142e7b9f982f433c 191026 httpd optional apache2-dev_2.4.52-1ubuntu4.4_ppc64el.deb 9156ee7ebc619b581b5c84a3ec289e9d 2980 httpd optional apache2-ssl-dev_2.4.52-1ubuntu4.4_ppc64el.deb ee7d78f2158bc89a6c342ca39d085cf0 13456 debug optional apache2-suexec-custom-dbgsym_2.4.52-1ubuntu4.4_ppc64el.ddeb 5f04cf039dd2767aad514dd2fee84055 16438 httpd optional apache2-suexec-custom_2.4.52-1ubuntu4.4_ppc64el.deb 1d0261789a2e9c9b60e36e9bd74c3152 12062 debug optional apache2-suexec-pristine-dbgsym_2.4.52-1ubuntu4.4_ppc64el.ddeb 573f908db1a6a6b995cd4b186b34cf5f 14796 httpd optional apache2-suexec-pristine_2.4.52-1ubuntu4.4_ppc64el.deb 0201ee2dcdc0b2cd26d67eb4b9b82726 129672 debug optional apache2-utils-dbgsym_2.4.52-1ubuntu4.4_ppc64el.ddeb a742f1ec8119463fd0f4797625bd4746 94368 httpd optional apache2-utils_2.4.52-1ubuntu4.4_ppc64el.deb 9163bb1950679a77f4e1861a887f2172 12019 httpd optional apache2_2.4.52-1ubuntu4.4_ppc64el.buildinfo ed79ec12ab5cc62ff644258abadcb007 97860 httpd optional apache2_2.4.52-1ubuntu4.4_ppc64el.deb 9b4ca70e763c598b385d9ec81423592b 804 oldlibs optional libapache2-mod-md_2.4.52-1ubuntu4.4_ppc64el.deb d05fd2591822a6c44a5f9f7e57ae377a 986 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.52-1ubuntu4.4_ppc64el.deb Original-Maintainer: Debian Apache Maintainers