Format: 1.8 Date: Mon, 16 Sep 2019 05:36:25 -0700 Source: apache2 Binary: apache2 apache2-bin apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-pristine apache2-utils libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: armhf Version: 2.4.38-2ubuntu2.3 Distribution: disco Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Steve Beattie Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Launchpad-Bugs-Fixed: 1842701 Changes: apache2 (2.4.38-2ubuntu2.3) disco-security; urgency=medium . * SECURITY REGRESSION: mod_proxy balancer XSS/CSRF hardening broke browsers which change case in headers and breaks balancers loading in some configurations (LP: #1842701) - drop d/p/CVE-2019-10092-3.patch Checksums-Sha1: 71cb74508adae98fdb27bdb1544a7fe245c3079a 4666416 apache2-bin-dbgsym_2.4.38-2ubuntu2.3_armhf.ddeb 594898548296db7f370df7738dbcc2b584b8428a 998836 apache2-bin_2.4.38-2ubuntu2.3_armhf.deb 77d410262314bc27b22daa31292f0f4edd7a4ee5 179792 apache2-dev_2.4.38-2ubuntu2.3_armhf.deb 6f42b0341945b0d7b947872672458ba3484f5578 2392 apache2-ssl-dev_2.4.38-2ubuntu2.3_armhf.deb bb2444ed03336de23de2016f1a73bc418d0756c1 12744 apache2-suexec-custom-dbgsym_2.4.38-2ubuntu2.3_armhf.ddeb ccacbdfa28f2e61c7cf5cfda7f74a5968e9ae063 14624 apache2-suexec-custom_2.4.38-2ubuntu2.3_armhf.deb 06ee14fa26f4fb4813348ff405abac93667f315c 11624 apache2-suexec-pristine-dbgsym_2.4.38-2ubuntu2.3_armhf.ddeb cc9e11288140509fdbd53eadcc738d55ca8468f8 13184 apache2-suexec-pristine_2.4.38-2ubuntu2.3_armhf.deb fec71b96acd42db0d202e1281ca66e219c3919e4 140616 apache2-utils-dbgsym_2.4.38-2ubuntu2.3_armhf.ddeb 09389dfe2fd04e4758215c33d25deffdd301bc28 86504 apache2-utils_2.4.38-2ubuntu2.3_armhf.deb f4527186025476c1374e18ff365cd5dc4db5b316 11005 apache2_2.4.38-2ubuntu2.3_armhf.buildinfo af29a0a162e996d76c8f0e416271f858f9c84099 95468 apache2_2.4.38-2ubuntu2.3_armhf.deb 4de12ebb5075eb7e7057724ba5f8c94e819b7929 988 libapache2-mod-md_2.4.38-2ubuntu2.3_armhf.deb be7ef1d9284db937969f9325fc7a4cdc41225f45 1172 libapache2-mod-proxy-uwsgi_2.4.38-2ubuntu2.3_armhf.deb Checksums-Sha256: a4eea1171d720516f85cbeed1275fe3c0f64ad2fc8e3802190397fc05ef4fa78 4666416 apache2-bin-dbgsym_2.4.38-2ubuntu2.3_armhf.ddeb 90b692c304fc3cf3ffa3af7c5060b67a68eb450afafffc8f649366af773d1af7 998836 apache2-bin_2.4.38-2ubuntu2.3_armhf.deb e728460f5f1451383289ab9d85b082d0e8cfea4aa9a88939c02ec26f6f553b54 179792 apache2-dev_2.4.38-2ubuntu2.3_armhf.deb bd0c4567820c68b3b22eef56473f8ea93412670f5dcb7e336bdefd67648f7ca9 2392 apache2-ssl-dev_2.4.38-2ubuntu2.3_armhf.deb 1a6a71a9a7a75e2d30903853a144bc6a5081d603fabc21a2e994f255ae74f954 12744 apache2-suexec-custom-dbgsym_2.4.38-2ubuntu2.3_armhf.ddeb 59eb25be720e6f8d00af322fb22224a36de691b5fc12d3e1d817dfa89753b11f 14624 apache2-suexec-custom_2.4.38-2ubuntu2.3_armhf.deb 320d6cc8b503ea22981a904c4dd4ec5c1ab09334153aced367c598f4401200c9 11624 apache2-suexec-pristine-dbgsym_2.4.38-2ubuntu2.3_armhf.ddeb 5bde3aa70fc23154071622d4f915defbb08dca280c1978e8f256d3f387511b1d 13184 apache2-suexec-pristine_2.4.38-2ubuntu2.3_armhf.deb 90cf66872cd0728ad843e4e8306ef67f73b45a95eb8b629a860da4e2adfb2e97 140616 apache2-utils-dbgsym_2.4.38-2ubuntu2.3_armhf.ddeb 231d0c671f8a2c7286ed0f2686e264fdecdcb76daf9ef454588fb1566fcf78b3 86504 apache2-utils_2.4.38-2ubuntu2.3_armhf.deb 357aedb5d4ded7d9555aa356d74e2233fc5977831c495b5bed73c70451080941 11005 apache2_2.4.38-2ubuntu2.3_armhf.buildinfo a8c608d669625f8c481716fefff0f637a20d0a7b9eab2cd8a0be0a8f2719c8b6 95468 apache2_2.4.38-2ubuntu2.3_armhf.deb 8c34ecb1e22ee6c3477a097b8d8a9bd41a1c15ea75d0a8cc38b333358c5d9a33 988 libapache2-mod-md_2.4.38-2ubuntu2.3_armhf.deb 32b9801ab9445eaa678e182ae69b0d0146c340ffa06f7482180eb4940d45b661 1172 libapache2-mod-proxy-uwsgi_2.4.38-2ubuntu2.3_armhf.deb Files: 6613a1cbe02ed6704642d659fb69a010 4666416 debug optional apache2-bin-dbgsym_2.4.38-2ubuntu2.3_armhf.ddeb dc2cf9b876961852a6c2d0182b921705 998836 httpd optional apache2-bin_2.4.38-2ubuntu2.3_armhf.deb 912884e45d80c0430f3ceb68eaa5542f 179792 httpd optional apache2-dev_2.4.38-2ubuntu2.3_armhf.deb 118371f606607c6e6fb99be09c7e2952 2392 httpd optional apache2-ssl-dev_2.4.38-2ubuntu2.3_armhf.deb a7cc004dbdc2214bd8ca72949743e6bc 12744 debug optional apache2-suexec-custom-dbgsym_2.4.38-2ubuntu2.3_armhf.ddeb 2b072da55120d2c6c02054ff5bf38f6c 14624 httpd optional apache2-suexec-custom_2.4.38-2ubuntu2.3_armhf.deb f8fc5cdda58dc6be94ad4de77accd907 11624 debug optional apache2-suexec-pristine-dbgsym_2.4.38-2ubuntu2.3_armhf.ddeb 763c2cd09266485eda3f0379f62e7843 13184 httpd optional apache2-suexec-pristine_2.4.38-2ubuntu2.3_armhf.deb afd2e540db67d6c361cce94696875a7a 140616 debug optional apache2-utils-dbgsym_2.4.38-2ubuntu2.3_armhf.ddeb 7a30d7429a6f6f9fb606213d1ec8d04d 86504 httpd optional apache2-utils_2.4.38-2ubuntu2.3_armhf.deb 2be8a06043ee649c33cb6360c5cea841 11005 httpd optional apache2_2.4.38-2ubuntu2.3_armhf.buildinfo e3d710eb9ff0e27c7b322590b4a1b5b2 95468 httpd optional apache2_2.4.38-2ubuntu2.3_armhf.deb a6ca100228e0233cf1176274d7b30472 988 oldlibs optional libapache2-mod-md_2.4.38-2ubuntu2.3_armhf.deb 1a5a87fe749d3f94a8deacefe110852c 1172 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.38-2ubuntu2.3_armhf.deb Original-Maintainer: Debian Apache Maintainers