apache2 2.4.18-2ubuntu4.1 source package in Ubuntu
Changelog
apache2 (2.4.18-2ubuntu4.1) yakkety-security; urgency=medium * SECURITY UPDATE: mod_sessioncrypto padding oracle attack issue - debian/patches/CVE-2016-0736.patch: authenticate the session data/cookie with a MAC in modules/session/mod_session_crypto.c. - CVE-2016-0736 * SECURITY UPDATE: denial of service via malicious mod_auth_digest input - debian/patches/CVE-2016-2161.patch: improve memory handling in modules/aaa/mod_auth_digest.c. - CVE-2016-2161 * SECURITY UPDATE: response splitting and cache pollution issue via incomplete RFC7230 HTTP request grammar enforcing - debian/patches/CVE-2016-8743.patch: enfore stricter parsing in include/http_core.h, include/http_protocol.h, include/httpd.h, modules/http/http_filters.c, server/core.c, server/gen_test_char.c, server/protocol.c, server/util.c, server/vhost.c. - debian/patches/hostnames_with_underscores.diff: relax hostname restrictions in server/vhost.c. - CVE-2016-8743 * WARNING: The fix for CVE-2016-8743 introduces a behavioural change and may introduce compatibility issues with clients that do not strictly follow specifications. A new configuration directive, "HttpProtocolOptions Unsafe" can be used to re-enable some of the less strict parsing restrictions, at the expense of security. -- Marc Deslauriers <email address hidden> Fri, 05 May 2017 10:51:32 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Yakkety
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- httpd
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
apache2_2.4.18.orig.tar.bz2 | 4.9 MiB | 0644b050de41f5c9f67c825285049b144690421acb709b06fe53eddfa8a9fd4c |
apache2_2.4.18-2ubuntu4.1.debian.tar.xz | 373.5 KiB | 4dc448c03c3dbbdfaad3793969055fc0622c4d95a829a46045d5e814be953de0 |
apache2_2.4.18-2ubuntu4.1.dsc | 2.8 KiB | d49789199859cc3492169fba96c00acb8c342448e86fedcc80ef4e35c27b9f55 |
Available diffs
Binary packages built by this source
- apache2: No summary available for apache2 in ubuntu yakkety.
No description available for apache2 in ubuntu yakkety.
- apache2-bin: No summary available for apache2-bin in ubuntu yakkety.
No description available for apache2-bin in ubuntu yakkety.
- apache2-bin-dbgsym: No summary available for apache2-bin-dbgsym in ubuntu yakkety.
No description available for apache2-bin-dbgsym in ubuntu yakkety.
- apache2-data: No summary available for apache2-data in ubuntu yakkety.
No description available for apache2-data in ubuntu yakkety.
- apache2-dbg: No summary available for apache2-dbg in ubuntu yakkety.
No description available for apache2-dbg in ubuntu yakkety.
- apache2-dbgsym: No summary available for apache2-dbgsym in ubuntu yakkety.
No description available for apache2-dbgsym in ubuntu yakkety.
- apache2-dev: No summary available for apache2-dev in ubuntu yakkety.
No description available for apache2-dev in ubuntu yakkety.
- apache2-dev-dbgsym: No summary available for apache2-dev-dbgsym in ubuntu yakkety.
No description available for apache2-dev-dbgsym in ubuntu yakkety.
- apache2-doc: No summary available for apache2-doc in ubuntu yakkety.
No description available for apache2-doc in ubuntu yakkety.
- apache2-suexec-custom: No summary available for apache2-suexec-custom in ubuntu yakkety.
No description available for apache2-
suexec- custom in ubuntu yakkety.
- apache2-suexec-custom-dbgsym: No summary available for apache2-suexec-custom-dbgsym in ubuntu yakkety.
No description available for apache2-
suexec- custom- dbgsym in ubuntu yakkety.
- apache2-suexec-pristine: No summary available for apache2-suexec-pristine in ubuntu yakkety.
No description available for apache2-
suexec- pristine in ubuntu yakkety.
- apache2-suexec-pristine-dbgsym: No summary available for apache2-suexec-pristine-dbgsym in ubuntu yakkety.
No description available for apache2-
suexec- pristine- dbgsym in ubuntu yakkety.
- apache2-utils: No summary available for apache2-utils in ubuntu yakkety.
No description available for apache2-utils in ubuntu yakkety.
- apache2-utils-dbgsym: No summary available for apache2-utils-dbgsym in ubuntu yakkety.
No description available for apache2-
utils-dbgsym in ubuntu yakkety.