Format: 1.8 Date: Thu, 26 Oct 2023 09:54:09 -0400 Source: apache2 Binary: apache2 apache2-bin apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-pristine apache2-utils libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: ppc64el Version: 2.4.41-4ubuntu3.15 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Changes: apache2 (2.4.41-4ubuntu3.15) focal-security; urgency=medium . * SECURITY UPDATE: mod_macro buffer over-read - debian/patches/CVE-2023-31122.patch: fix length in modules/core/mod_macro.c. - CVE-2023-31122 * SECURITY UPDATE: Multiple issues in HTTP/2 - CVE-2023-43622: DoS in HTTP/2 with initial windows size 0 - CVE-2023-45802: HTTP/2 stream memory not reclaimed right away on RST - debian/tests/run-test-suite: run with HARNESS_VERBOSE=1. - debian/patches/update_tests.patch: backport tests from jammy's 2.4.52 to improve test coverage. - debian/patches/update_http2.patch: backport version 2.0.22 of mod_http2 from httpd 2.4.58. - CVE-2023-43622 - CVE-2023-45802 Checksums-Sha1: e181419f9d971eb72276e97ca8df6aa1e0119977 5168944 apache2-bin-dbgsym_2.4.41-4ubuntu3.15_ppc64el.ddeb f258fc49df921c8eb912e7dedfd88925b787a585 1276936 apache2-bin_2.4.41-4ubuntu3.15_ppc64el.deb 5067dab738ac58a17bb7f24536b2437d51d9ba98 179404 apache2-dev_2.4.41-4ubuntu3.15_ppc64el.deb e7f70346b983405b742a8bbaeadf87b1229a5e55 3156 apache2-ssl-dev_2.4.41-4ubuntu3.15_ppc64el.deb d8f6463a6c5356e4ce3883ea377bd9cf5cf18e93 13120 apache2-suexec-custom-dbgsym_2.4.41-4ubuntu3.15_ppc64el.ddeb 658e983277d71b42e8555e177ca6c3029055fe39 15512 apache2-suexec-custom_2.4.41-4ubuntu3.15_ppc64el.deb 37d40fb476aa48f656fe7807dec526080097ab72 11872 apache2-suexec-pristine-dbgsym_2.4.41-4ubuntu3.15_ppc64el.ddeb f099449caae90e834c624bb63901dfa22e727128 13928 apache2-suexec-pristine_2.4.41-4ubuntu3.15_ppc64el.deb 48edb855b263f8731bb050c73a8e135dbeebde06 147396 apache2-utils-dbgsym_2.4.41-4ubuntu3.15_ppc64el.ddeb 3e40f70bc5906aa129654e444880fdadc10caff4 86588 apache2-utils_2.4.41-4ubuntu3.15_ppc64el.deb 5b802a2809275fea73836623d3a4414804a94b5e 12174 apache2_2.4.41-4ubuntu3.15_ppc64el.buildinfo daa3c1a83685bab2fb52749fa612c02954e1bddb 95596 apache2_2.4.41-4ubuntu3.15_ppc64el.deb d034daf87d854f4393a0de04134ac89682739701 992 libapache2-mod-md_2.4.41-4ubuntu3.15_ppc64el.deb 2a57783e276e5668af015ecfe6d6c785e4f5b514 1188 libapache2-mod-proxy-uwsgi_2.4.41-4ubuntu3.15_ppc64el.deb Checksums-Sha256: 8cf2525275da91a203d4b36db86065a1d5c35d3d4081f1dafd8c9d592475e6e8 5168944 apache2-bin-dbgsym_2.4.41-4ubuntu3.15_ppc64el.ddeb 53fa4e291c3fd384b2fdd2ca0c3d67ba6ced2fa33401b0a89750ed78746b2872 1276936 apache2-bin_2.4.41-4ubuntu3.15_ppc64el.deb 52e298439cacf0c68ed5f22c311fdd54a1f98fde0c5109d30f73fd69c41fa6b2 179404 apache2-dev_2.4.41-4ubuntu3.15_ppc64el.deb 46eb2e2718f544554aa1ab93c7acfcb28d9b6150cf68dfad1f78c435246b1f31 3156 apache2-ssl-dev_2.4.41-4ubuntu3.15_ppc64el.deb 9ab37e467faff425af1f5d1b3badd914fa69e33429783f5bad7907275ff99915 13120 apache2-suexec-custom-dbgsym_2.4.41-4ubuntu3.15_ppc64el.ddeb 142e2529fe475234484b9c0a7378244f1477a1e44a6937185bb8fe8a2b448e64 15512 apache2-suexec-custom_2.4.41-4ubuntu3.15_ppc64el.deb 491746bbbfb0931a153606cb2a71373c5ebe430d0ecd4dd6a0bc1b40b55b350c 11872 apache2-suexec-pristine-dbgsym_2.4.41-4ubuntu3.15_ppc64el.ddeb 8a0168d0f74102398bb2c940501836b6ef55f6e62b74a9a9f528e4aaede18f4a 13928 apache2-suexec-pristine_2.4.41-4ubuntu3.15_ppc64el.deb 6f92828820aa9fdb8dae7659744ef5cc429a252d7d02ada949d37a028574f604 147396 apache2-utils-dbgsym_2.4.41-4ubuntu3.15_ppc64el.ddeb 6a139ae33bc228dcc8eeb80402427e45331172a8552ce77216250383d42905e6 86588 apache2-utils_2.4.41-4ubuntu3.15_ppc64el.deb 20fd3e39746944648dc6cd46932e8e326a7f9b3eef2e14a95e2764a744bb289e 12174 apache2_2.4.41-4ubuntu3.15_ppc64el.buildinfo b23aef7fced35274f176b42ad20b410411e3fa18ab3f7abdf7f07ecdbed3a521 95596 apache2_2.4.41-4ubuntu3.15_ppc64el.deb 4655d3d1df97cb0a52c283fd4b311e7fbc55f463f3a4ff09927d64f2253bc04c 992 libapache2-mod-md_2.4.41-4ubuntu3.15_ppc64el.deb 6bd0988364b5f910d1c429c6925573b4840bb71f593622eee9ef6ef70bda0bcc 1188 libapache2-mod-proxy-uwsgi_2.4.41-4ubuntu3.15_ppc64el.deb Files: 4976cdeda18beb6255f2324da45506be 5168944 debug optional apache2-bin-dbgsym_2.4.41-4ubuntu3.15_ppc64el.ddeb 7b5bc3f302b3d4eba88c0c865d662d97 1276936 httpd optional apache2-bin_2.4.41-4ubuntu3.15_ppc64el.deb 8b09308da49d5cc92a701533d951445b 179404 httpd optional apache2-dev_2.4.41-4ubuntu3.15_ppc64el.deb dcc22866578a51fbde57421a8975b081 3156 httpd optional apache2-ssl-dev_2.4.41-4ubuntu3.15_ppc64el.deb 095dc28d8a4f7d91534292b9b4fe5423 13120 debug optional apache2-suexec-custom-dbgsym_2.4.41-4ubuntu3.15_ppc64el.ddeb e271c0fa5415bf949ff700bf68af508f 15512 httpd optional apache2-suexec-custom_2.4.41-4ubuntu3.15_ppc64el.deb f835c7d94a22a51515ea76bf11d572ff 11872 debug optional apache2-suexec-pristine-dbgsym_2.4.41-4ubuntu3.15_ppc64el.ddeb 0fc4904d879bf1adc5b60e1d58c3614a 13928 httpd optional apache2-suexec-pristine_2.4.41-4ubuntu3.15_ppc64el.deb de88ad0331f88e5ea4ae070c0c26be04 147396 debug optional apache2-utils-dbgsym_2.4.41-4ubuntu3.15_ppc64el.ddeb 2643930bb05f2f881a963244faa3129f 86588 httpd optional apache2-utils_2.4.41-4ubuntu3.15_ppc64el.deb 0baf65a19c79f0b872d5e631d6f4f4dc 12174 httpd optional apache2_2.4.41-4ubuntu3.15_ppc64el.buildinfo ab9693aa9ef5faf2f4e26925b9fdd9cf 95596 httpd optional apache2_2.4.41-4ubuntu3.15_ppc64el.deb 9d787cf809bd7119060d269339c8a5b1 992 oldlibs optional libapache2-mod-md_2.4.41-4ubuntu3.15_ppc64el.deb e9dc25b025de955b0386d23a0bc6a453 1188 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.41-4ubuntu3.15_ppc64el.deb Original-Maintainer: Debian Apache Maintainers