Format: 1.8 Date: Thu, 26 Oct 2023 09:54:09 -0400 Source: apache2 Binary: apache2 apache2-bin apache2-data apache2-dev apache2-doc apache2-ssl-dev apache2-suexec-custom apache2-suexec-pristine apache2-utils libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: amd64 all Version: 2.4.41-4ubuntu3.15 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Changes: apache2 (2.4.41-4ubuntu3.15) focal-security; urgency=medium . * SECURITY UPDATE: mod_macro buffer over-read - debian/patches/CVE-2023-31122.patch: fix length in modules/core/mod_macro.c. - CVE-2023-31122 * SECURITY UPDATE: Multiple issues in HTTP/2 - CVE-2023-43622: DoS in HTTP/2 with initial windows size 0 - CVE-2023-45802: HTTP/2 stream memory not reclaimed right away on RST - debian/tests/run-test-suite: run with HARNESS_VERBOSE=1. - debian/patches/update_tests.patch: backport tests from jammy's 2.4.52 to improve test coverage. - debian/patches/update_http2.patch: backport version 2.0.22 of mod_http2 from httpd 2.4.58. - CVE-2023-43622 - CVE-2023-45802 Checksums-Sha1: 5c2b605c8ac08be434aba9a1d2dc67765e573619 4836620 apache2-bin-dbgsym_2.4.41-4ubuntu3.15_amd64.ddeb 3885f4f16f5a84dc9fe75517e8c6608c77645d71 1186492 apache2-bin_2.4.41-4ubuntu3.15_amd64.deb f3d9ee22bc30c93f45aec8828ffeaf7947bc8eb3 158532 apache2-data_2.4.41-4ubuntu3.15_all.deb f3a25bd324cc0fcebcf153e7c4340167a80dac0f 179400 apache2-dev_2.4.41-4ubuntu3.15_amd64.deb 615effe32db1549aed02db419f9d9a511aa063a3 3848028 apache2-doc_2.4.41-4ubuntu3.15_all.deb f5c95df90eedd3f37476e266342f81be2fdc6e01 3156 apache2-ssl-dev_2.4.41-4ubuntu3.15_amd64.deb 9923fe0e25ece2c9da37583979acd2a09bd1a0e2 12960 apache2-suexec-custom-dbgsym_2.4.41-4ubuntu3.15_amd64.ddeb af7348b765c399138c916554b2e6cf85d4d55ddd 15636 apache2-suexec-custom_2.4.41-4ubuntu3.15_amd64.deb 0f3cd42a680452b097633a0acf4232ddd229ad18 11748 apache2-suexec-pristine-dbgsym_2.4.41-4ubuntu3.15_amd64.ddeb 32c05e93c64e5f5552b0ce7aef29047a8fd85a3d 14020 apache2-suexec-pristine_2.4.41-4ubuntu3.15_amd64.deb 5e255c14bfef639f3abd6ea79f7ca650a75c965a 138636 apache2-utils-dbgsym_2.4.41-4ubuntu3.15_amd64.ddeb d51cfcab4d365822a9d084ee47279d592e33752d 84076 apache2-utils_2.4.41-4ubuntu3.15_amd64.deb 7ddc710c90b4bfadc34842aadb2534da88fb0e47 12657 apache2_2.4.41-4ubuntu3.15_amd64.buildinfo 0febe1cf91d7088e1cef86fb44ef7c00a7c90209 95592 apache2_2.4.41-4ubuntu3.15_amd64.deb 7f46955c4402f666a66338334530e26c05550c18 988 libapache2-mod-md_2.4.41-4ubuntu3.15_amd64.deb 9eee574ecfd03e6e56138ad2efe684c50a0215c0 1184 libapache2-mod-proxy-uwsgi_2.4.41-4ubuntu3.15_amd64.deb Checksums-Sha256: 0d92c372666cb3cc1dbeacef660babd60c18ee361debd2269d25b0ae11153246 4836620 apache2-bin-dbgsym_2.4.41-4ubuntu3.15_amd64.ddeb 6bba9a991795ba3b4eb65364ec552bf8819f774b016e72e70235b1d1878be052 1186492 apache2-bin_2.4.41-4ubuntu3.15_amd64.deb 911d2cbdcf1349bd94436642629ecad55e15552e2c4e224c60cc1da768472c49 158532 apache2-data_2.4.41-4ubuntu3.15_all.deb f1a0787090a3e3993eb723e13d495b8d2df65b8aca5a5d6a1353b1da6bf1c002 179400 apache2-dev_2.4.41-4ubuntu3.15_amd64.deb cbeb7f6ad7d9bf2711f6fc861966567307e170f9872f8c484e73f45bc1c79400 3848028 apache2-doc_2.4.41-4ubuntu3.15_all.deb eb34cb544ea34a6e8cdc2b299615eec4ea402ee95b2a14b88fd1ea47548312a9 3156 apache2-ssl-dev_2.4.41-4ubuntu3.15_amd64.deb 2d6c08505656f296decb0f9dbb760ca6cd8565806f83e5d663d9a4d6588f267d 12960 apache2-suexec-custom-dbgsym_2.4.41-4ubuntu3.15_amd64.ddeb 26a395fa3eb007e96a4c26bc9a9ef31ee2eeec1338c73aa75faae0fbd48be1e2 15636 apache2-suexec-custom_2.4.41-4ubuntu3.15_amd64.deb ba6f44c24a8eda0be74065858b99dd49af40a7252adddc4c9b1333b85578b1a6 11748 apache2-suexec-pristine-dbgsym_2.4.41-4ubuntu3.15_amd64.ddeb 75c8f37dad5302f899b3675c9642d34ab8fa240e5d90dc6e44746959570ec2ed 14020 apache2-suexec-pristine_2.4.41-4ubuntu3.15_amd64.deb 01f8c9e243190fcf850fb853a11950a14741e5b93ce3249b1ef4599429360a76 138636 apache2-utils-dbgsym_2.4.41-4ubuntu3.15_amd64.ddeb 86939d453d00bb88572a5e433f6099c77fc30bbd5d4698cef684f73b5a3cd26b 84076 apache2-utils_2.4.41-4ubuntu3.15_amd64.deb f1d3f6d841e97d7f49d2400f5c995502ea623b8253ed4ad05484278eb471cd77 12657 apache2_2.4.41-4ubuntu3.15_amd64.buildinfo b927d20e88ead153eaf5d37cc2bfa05e69d8c9bdf5e009a00ef96d5ba9c51b09 95592 apache2_2.4.41-4ubuntu3.15_amd64.deb e5b509dfcefc48ed3b9a49e9f37d73cd30ce57af722cab66b35e360bfdbe677e 988 libapache2-mod-md_2.4.41-4ubuntu3.15_amd64.deb 89dea4bffb358f10783bdc8c306b03ddc52f633ede68edbb4332a1aacd65b378 1184 libapache2-mod-proxy-uwsgi_2.4.41-4ubuntu3.15_amd64.deb Files: 41c5da69c9f04ab1640ea407ec37ed2d 4836620 debug optional apache2-bin-dbgsym_2.4.41-4ubuntu3.15_amd64.ddeb 5dc32811f020a22792acdabe8245cafa 1186492 httpd optional apache2-bin_2.4.41-4ubuntu3.15_amd64.deb 426fcc8e4aed053d09810062980c3a9a 158532 httpd optional apache2-data_2.4.41-4ubuntu3.15_all.deb e948e2a7246b0f72c59931cb321baf7d 179400 httpd optional apache2-dev_2.4.41-4ubuntu3.15_amd64.deb 7babf995dbed92e03038c5b356ba771a 3848028 doc optional apache2-doc_2.4.41-4ubuntu3.15_all.deb d42463630eb7fee0a8d95518a8bfbc19 3156 httpd optional apache2-ssl-dev_2.4.41-4ubuntu3.15_amd64.deb 6b3b5bcd48efdce14bc44a6bca200cbb 12960 debug optional apache2-suexec-custom-dbgsym_2.4.41-4ubuntu3.15_amd64.ddeb 16d6db0c720f62f2b03e1e53b0dcdb79 15636 httpd optional apache2-suexec-custom_2.4.41-4ubuntu3.15_amd64.deb d63e9d0119db6a3183687fbabd3d00db 11748 debug optional apache2-suexec-pristine-dbgsym_2.4.41-4ubuntu3.15_amd64.ddeb 60812ed3bbcca8767e9dcc2d0ed7dee7 14020 httpd optional apache2-suexec-pristine_2.4.41-4ubuntu3.15_amd64.deb 0798e1b83ab929a92dd2a00128c53f99 138636 debug optional apache2-utils-dbgsym_2.4.41-4ubuntu3.15_amd64.ddeb 7a8589649466918b404bf190ce1549b3 84076 httpd optional apache2-utils_2.4.41-4ubuntu3.15_amd64.deb 69f4e2b19983201dccbd30ac55258bf6 12657 httpd optional apache2_2.4.41-4ubuntu3.15_amd64.buildinfo 7b1c16e6a53d6dd586e6594950079353 95592 httpd optional apache2_2.4.41-4ubuntu3.15_amd64.deb ebb0c63d29873c0dc2880b2922e55f00 988 oldlibs optional libapache2-mod-md_2.4.41-4ubuntu3.15_amd64.deb d8a712a9d042c314e840daaaf1392c7a 1184 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.41-4ubuntu3.15_amd64.deb Original-Maintainer: Debian Apache Maintainers