Format: 1.8 Date: Mon, 16 Sep 2019 05:36:25 -0700 Source: apache2 Binary: apache2 apache2-bin apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-pristine apache2-utils libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: arm64 Version: 2.4.38-2ubuntu2.3 Distribution: disco Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Steve Beattie Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Launchpad-Bugs-Fixed: 1842701 Changes: apache2 (2.4.38-2ubuntu2.3) disco-security; urgency=medium . * SECURITY REGRESSION: mod_proxy balancer XSS/CSRF hardening broke browsers which change case in headers and breaks balancers loading in some configurations (LP: #1842701) - drop d/p/CVE-2019-10092-3.patch Checksums-Sha1: e17ead6ad6db50361ebdbcb382c4194c2b61dd8e 4726276 apache2-bin-dbgsym_2.4.38-2ubuntu2.3_arm64.ddeb 4f917767e81eca59943f1364a95d2a27e4b2e33a 1056848 apache2-bin_2.4.38-2ubuntu2.3_arm64.deb af508266b2188537b5c8344942dd1a0355363f86 179768 apache2-dev_2.4.38-2ubuntu2.3_arm64.deb ab55e02626a9c880201cb485859d2d4c59f679ff 2392 apache2-ssl-dev_2.4.38-2ubuntu2.3_arm64.deb c668933e088aefa5bc3c454774a89bc288b13bc3 13076 apache2-suexec-custom-dbgsym_2.4.38-2ubuntu2.3_arm64.ddeb e27db07eacf6319af38121c8e313f82352014782 15300 apache2-suexec-custom_2.4.38-2ubuntu2.3_arm64.deb 456d756d4186f9ce5f9eb2f4fbae979d426dec98 11920 apache2-suexec-pristine-dbgsym_2.4.38-2ubuntu2.3_arm64.ddeb 0b6a353154337c91edbe2bf5715d3595136a3906 13796 apache2-suexec-pristine_2.4.38-2ubuntu2.3_arm64.deb d18772dec6b85ae1b80c9daae07316db4a994d5e 140600 apache2-utils-dbgsym_2.4.38-2ubuntu2.3_arm64.ddeb 19592c210ebbc0a620af768e6eb35d417a793adb 84496 apache2-utils_2.4.38-2ubuntu2.3_arm64.deb bcbca16ef198456dacba905d6b1141a7938d7134 11113 apache2_2.4.38-2ubuntu2.3_arm64.buildinfo 4952b0e18aaeef41aad1a9ba664b634f1cd13931 95468 apache2_2.4.38-2ubuntu2.3_arm64.deb b937c6e768868f57c7581ee78e3ebc94b4d24d00 988 libapache2-mod-md_2.4.38-2ubuntu2.3_arm64.deb ad8ca177b8309f67ec4817f089811b9618b285fc 1172 libapache2-mod-proxy-uwsgi_2.4.38-2ubuntu2.3_arm64.deb Checksums-Sha256: e5189f5a1b1244fde0e82f14e5e711472d467060d0d8b80fb8edd9d94a09304b 4726276 apache2-bin-dbgsym_2.4.38-2ubuntu2.3_arm64.ddeb ffda848bb3a5854ce3c354a280fb9abfb6b5771aa4b8ac4a4eaa2eeae0dd0e2d 1056848 apache2-bin_2.4.38-2ubuntu2.3_arm64.deb 8d28fd3f4b0c9803112b5878dd41cc116b5e87ce55185c535881363180064a88 179768 apache2-dev_2.4.38-2ubuntu2.3_arm64.deb 59e1ecffac576cf1c54dbbb5f8eccba2bbf4edb3ffc9a7dc21472873149d6762 2392 apache2-ssl-dev_2.4.38-2ubuntu2.3_arm64.deb 0d9f36fc33b406375a83230a7bf8377ed9505543d80c0e0eaba2fa60b3cbe5b1 13076 apache2-suexec-custom-dbgsym_2.4.38-2ubuntu2.3_arm64.ddeb 7df3f95307d556decf832047a7aceddbc270734a8512870d40f523ae62014002 15300 apache2-suexec-custom_2.4.38-2ubuntu2.3_arm64.deb d55ddcd2f6538d4d14c08330da003c6ba230f317ccac46c78d72ad410c3ad157 11920 apache2-suexec-pristine-dbgsym_2.4.38-2ubuntu2.3_arm64.ddeb 990ce711d35eb47570b0c2f98feb44f8199deb3e8bcd2d4f08c312d8cf93eabc 13796 apache2-suexec-pristine_2.4.38-2ubuntu2.3_arm64.deb 11a230bcc7158748b7f706210970c1366639738df3444fe151e169e9027bf5ce 140600 apache2-utils-dbgsym_2.4.38-2ubuntu2.3_arm64.ddeb eb6a6d0d5f5af77b1c5bbfb9d88f2406d9fccdb8ed2359688889271566c9177c 84496 apache2-utils_2.4.38-2ubuntu2.3_arm64.deb 1405f9cb3ef6089921c18dc2b842e6d521435d9176de5ea4c00c1baac33f4ffc 11113 apache2_2.4.38-2ubuntu2.3_arm64.buildinfo d1edc46fe786ef04b2cff121069ff573577d93e2b8bfc3a52b9ad9f9d8feca6f 95468 apache2_2.4.38-2ubuntu2.3_arm64.deb fcaf5d1235076baf37fd233325662b250aa45cb72285aa4f4466dddc654b1797 988 libapache2-mod-md_2.4.38-2ubuntu2.3_arm64.deb e5bf41d4283067a74c3e44540c15c119439c42a0c54c634ac625d14cb5353840 1172 libapache2-mod-proxy-uwsgi_2.4.38-2ubuntu2.3_arm64.deb Files: 2861fcb150420cf223aed796626fd05c 4726276 debug optional apache2-bin-dbgsym_2.4.38-2ubuntu2.3_arm64.ddeb ade60963ca82cdbd68fc3602dae1127d 1056848 httpd optional apache2-bin_2.4.38-2ubuntu2.3_arm64.deb eb987128c8f1c83a2ee2506cb9feb6c2 179768 httpd optional apache2-dev_2.4.38-2ubuntu2.3_arm64.deb a60041d37f7211b62316be2254ef136a 2392 httpd optional apache2-ssl-dev_2.4.38-2ubuntu2.3_arm64.deb 39f87f57cba35c77f2a53be52fb76d33 13076 debug optional apache2-suexec-custom-dbgsym_2.4.38-2ubuntu2.3_arm64.ddeb ef7af4d394794ea1b425665de3b930c1 15300 httpd optional apache2-suexec-custom_2.4.38-2ubuntu2.3_arm64.deb 5cbf3a32da6b413fdd1d4f443ee0768a 11920 debug optional apache2-suexec-pristine-dbgsym_2.4.38-2ubuntu2.3_arm64.ddeb 8543b94a024d5861c6b1534cc2420321 13796 httpd optional apache2-suexec-pristine_2.4.38-2ubuntu2.3_arm64.deb eac4b820bc595f7626c8a5ff3f5a27cc 140600 debug optional apache2-utils-dbgsym_2.4.38-2ubuntu2.3_arm64.ddeb 95b796ecc1b1f1f76c50ce59a92d3284 84496 httpd optional apache2-utils_2.4.38-2ubuntu2.3_arm64.deb ccf34a308f2009b68e7caa7c7a879064 11113 httpd optional apache2_2.4.38-2ubuntu2.3_arm64.buildinfo 65579d0f89ee9c154e4e3282aa4692f3 95468 httpd optional apache2_2.4.38-2ubuntu2.3_arm64.deb 48cc85503bd7cf58ebc37f58bd2b3aca 988 oldlibs optional libapache2-mod-md_2.4.38-2ubuntu2.3_arm64.deb d7db238567811bda69b61ba60e5fae99 1172 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.38-2ubuntu2.3_arm64.deb Original-Maintainer: Debian Apache Maintainers