Publishing details

• Created on 2019-04-04 by Ubuntu Archive Auto-Sync
• Removed from disk on 2020-07-14.
• Removal requested on 2020-07-14.
• Published on 2019-04-04

Changelog

apache2 (2.4.38-2ubuntu2) disco; urgency=medium

  * SECURITY UPDATE: read-after-free on a string compare in mod_http2
    - debian/patches/CVE-2019-0196.patch: disentangelment of stream and
      request method in modules/http2/h2_request.c.
    - CVE-2019-0196
  * SECURITY UPDATE: privilege escalation from modules' scripts
    - debian/patches/CVE-2019-0211.patch: bind the bucket number of each
      child to its slot number in include/scoreboard.h,
      server/mpm/event/event.c, server/mpm/prefork/prefork.c,
      server/mpm/worker/worker.c.
    - CVE-2019-0211
  * SECURITY UPDATE: mod_ssl access control bypass
    - debian/patches/CVE-2019-0215.patch: restore SSL verify state after
      PHA failure in TLSv1.3 in modules/ssl/ssl_engine_kernel.c.
    - CVE-2019-0215
  * SECURITY UPDATE: mod_auth_digest access control bypass
    - debian/patches/CVE-2019-0217.patch: fix a race condition in
      modules/aaa/mod_auth_digest.c.
    - CVE-2019-0217
  * SECURITY UPDATE: URL normalization inconsistincy
    - debian/patches/CVE-2019-0220-1.patch: merge consecutive slashes in
      the path in include/http_core.h, include/httpd.h, server/core.c,
      server/request.c, server/util.c.
    - debian/patches/CVE-2019-0220-2.patch: fix r->parsed_uri.path safety
      in server/request.c, server/util.c.
    - debian/patches/CVE-2019-0220-3.patch: maintainer mode fix in
      server/util.c.
    - CVE-2019-0220

 -- Marc Deslauriers <email address hidden>  Wed, 03 Apr 2019 14:31:46 -0400

Builds

• amd64
• arm64
• armhf
• i386
• ppc64el
• s390x

Package files

• apache2-bin-dbgsym_2.4.38-2ubuntu2_amd64.ddeb (4.5 MiB)
• apache2-bin-dbgsym_2.4.38-2ubuntu2_arm64.ddeb (4.5 MiB)
• apache2-bin-dbgsym_2.4.38-2ubuntu2_armhf.ddeb (4.5 MiB)
• apache2-bin-dbgsym_2.4.38-2ubuntu2_i386.ddeb (4.0 MiB)
• apache2-bin-dbgsym_2.4.38-2ubuntu2_ppc64el.ddeb (4.8 MiB)
• apache2-bin-dbgsym_2.4.38-2ubuntu2_s390x.ddeb (4.6 MiB)
• apache2-bin_2.4.38-2ubuntu2_amd64.deb (1.1 MiB)
• apache2-bin_2.4.38-2ubuntu2_arm64.deb (1.0 MiB)
• apache2-bin_2.4.38-2ubuntu2_armhf.deb (976.9 KiB)
• apache2-bin_2.4.38-2ubuntu2_i386.deb (1.2 MiB)
• apache2-bin_2.4.38-2ubuntu2_ppc64el.deb (1.2 MiB)
• apache2-bin_2.4.38-2ubuntu2_s390x.deb (1.0 MiB)
• apache2-data_2.4.38-2ubuntu2_all.deb (159.9 KiB)
• apache2-dev_2.4.38-2ubuntu2_amd64.deb (174.7 KiB)
• apache2-dev_2.4.38-2ubuntu2_arm64.deb (174.7 KiB)
• apache2-dev_2.4.38-2ubuntu2_armhf.deb (174.7 KiB)
• apache2-dev_2.4.38-2ubuntu2_i386.deb (174.7 KiB)
• apache2-dev_2.4.38-2ubuntu2_ppc64el.deb (174.7 KiB)
• apache2-dev_2.4.38-2ubuntu2_s390x.deb (174.7 KiB)
• apache2-doc_2.4.38-2ubuntu2_all.deb (3.7 MiB)
• apache2-ssl-dev_2.4.38-2ubuntu2_amd64.deb (2.3 KiB)
• apache2-ssl-dev_2.4.38-2ubuntu2_arm64.deb (2.3 KiB)
• apache2-ssl-dev_2.4.38-2ubuntu2_armhf.deb (2.3 KiB)
• apache2-ssl-dev_2.4.38-2ubuntu2_i386.deb (2.3 KiB)
• apache2-ssl-dev_2.4.38-2ubuntu2_ppc64el.deb (2.3 KiB)
• apache2-ssl-dev_2.4.38-2ubuntu2_s390x.deb (2.3 KiB)
• apache2-suexec-custom-dbgsym_2.4.38-2ubuntu2_amd64.ddeb (12.6 KiB)
• apache2-suexec-custom-dbgsym_2.4.38-2ubuntu2_arm64.ddeb (12.8 KiB)
• apache2-suexec-custom-dbgsym_2.4.38-2ubuntu2_armhf.ddeb (12.4 KiB)
• apache2-suexec-custom-dbgsym_2.4.38-2ubuntu2_i386.ddeb (11.6 KiB)
• apache2-suexec-custom-dbgsym_2.4.38-2ubuntu2_ppc64el.ddeb (12.8 KiB)
• apache2-suexec-custom-dbgsym_2.4.38-2ubuntu2_s390x.ddeb (12.6 KiB)
• apache2-suexec-custom_2.4.38-2ubuntu2_amd64.deb (15.1 KiB)
• apache2-suexec-custom_2.4.38-2ubuntu2_arm64.deb (14.9 KiB)
• apache2-suexec-custom_2.4.38-2ubuntu2_armhf.deb (14.3 KiB)
• apache2-suexec-custom_2.4.38-2ubuntu2_i386.deb (15.1 KiB)
• apache2-suexec-custom_2.4.38-2ubuntu2_ppc64el.deb (15.2 KiB)
• apache2-suexec-custom_2.4.38-2ubuntu2_s390x.deb (14.8 KiB)
• apache2-suexec-pristine-dbgsym_2.4.38-2ubuntu2_amd64.ddeb (11.4 KiB)
• apache2-suexec-pristine-dbgsym_2.4.38-2ubuntu2_arm64.ddeb (11.6 KiB)
• apache2-suexec-pristine-dbgsym_2.4.38-2ubuntu2_armhf.ddeb (11.4 KiB)
• apache2-suexec-pristine-dbgsym_2.4.38-2ubuntu2_i386.ddeb (10.5 KiB)
• apache2-suexec-pristine-dbgsym_2.4.38-2ubuntu2_ppc64el.ddeb (11.6 KiB)
• apache2-suexec-pristine-dbgsym_2.4.38-2ubuntu2_s390x.ddeb (11.3 KiB)
• apache2-suexec-pristine_2.4.38-2ubuntu2_amd64.deb (13.6 KiB)
• apache2-suexec-pristine_2.4.38-2ubuntu2_arm64.deb (13.5 KiB)
• apache2-suexec-pristine_2.4.38-2ubuntu2_armhf.deb (12.8 KiB)
• apache2-suexec-pristine_2.4.38-2ubuntu2_i386.deb (13.6 KiB)
• apache2-suexec-pristine_2.4.38-2ubuntu2_ppc64el.deb (13.7 KiB)
• apache2-suexec-pristine_2.4.38-2ubuntu2_s390x.deb (13.3 KiB)
• apache2-utils-dbgsym_2.4.38-2ubuntu2_amd64.ddeb (134.6 KiB)
• apache2-utils-dbgsym_2.4.38-2ubuntu2_arm64.ddeb (137.3 KiB)
• apache2-utils-dbgsym_2.4.38-2ubuntu2_armhf.ddeb (137.4 KiB)
• apache2-utils-dbgsym_2.4.38-2ubuntu2_i386.ddeb (126.9 KiB)
• apache2-utils-dbgsym_2.4.38-2ubuntu2_ppc64el.ddeb (144.1 KiB)
• apache2-utils-dbgsym_2.4.38-2ubuntu2_s390x.ddeb (137.5 KiB)
• apache2-utils_2.4.38-2ubuntu2_amd64.deb (84.0 KiB)
• apache2-utils_2.4.38-2ubuntu2_arm64.deb (81.6 KiB)
• apache2-utils_2.4.38-2ubuntu2_armhf.deb (83.7 KiB)
• apache2-utils_2.4.38-2ubuntu2_i386.deb (87.8 KiB)
• apache2-utils_2.4.38-2ubuntu2_ppc64el.deb (88.3 KiB)
• apache2-utils_2.4.38-2ubuntu2_s390x.deb (82.0 KiB)
• apache2_2.4.38-2ubuntu2.debian.tar.xz (1010.4 KiB)
• apache2_2.4.38-2ubuntu2.dsc (3.3 KiB)
• apache2_2.4.38-2ubuntu2_amd64.deb (93.2 KiB)
• apache2_2.4.38-2ubuntu2_arm64.deb (93.2 KiB)
• apache2_2.4.38-2ubuntu2_armhf.deb (93.2 KiB)
• apache2_2.4.38-2ubuntu2_i386.deb (93.2 KiB)
• apache2_2.4.38-2ubuntu2_ppc64el.deb (93.2 KiB)
• apache2_2.4.38-2ubuntu2_s390x.deb (93.2 KiB)
• apache2_2.4.38.orig.tar.gz (8.8 MiB)
• libapache2-mod-md_2.4.38-2ubuntu2_amd64.deb (988 bytes)
• libapache2-mod-md_2.4.38-2ubuntu2_arm64.deb (988 bytes)
• libapache2-mod-md_2.4.38-2ubuntu2_armhf.deb (988 bytes)
• libapache2-mod-md_2.4.38-2ubuntu2_i386.deb (988 bytes)
• libapache2-mod-md_2.4.38-2ubuntu2_ppc64el.deb (992 bytes)
• libapache2-mod-md_2.4.38-2ubuntu2_s390x.deb (988 bytes)
• libapache2-mod-proxy-uwsgi_2.4.38-2ubuntu2_amd64.deb (1.1 KiB)
• libapache2-mod-proxy-uwsgi_2.4.38-2ubuntu2_arm64.deb (1.1 KiB)
• libapache2-mod-proxy-uwsgi_2.4.38-2ubuntu2_armhf.deb (1.1 KiB)
• libapache2-mod-proxy-uwsgi_2.4.38-2ubuntu2_i386.deb (1.1 KiB)
• libapache2-mod-proxy-uwsgi_2.4.38-2ubuntu2_ppc64el.deb (1.2 KiB)
• libapache2-mod-proxy-uwsgi_2.4.38-2ubuntu2_s390x.deb (1.1 KiB)