apache2 2.4.18-2ubuntu4.1 source package in Ubuntu

Changelog

apache2 (2.4.18-2ubuntu4.1) yakkety-security; urgency=medium

  * SECURITY UPDATE: mod_sessioncrypto padding oracle attack issue
    - debian/patches/CVE-2016-0736.patch: authenticate the session
      data/cookie with a MAC in modules/session/mod_session_crypto.c.
    - CVE-2016-0736
  * SECURITY UPDATE: denial of service via malicious mod_auth_digest input
    - debian/patches/CVE-2016-2161.patch: improve memory handling in
      modules/aaa/mod_auth_digest.c.
    - CVE-2016-2161
  * SECURITY UPDATE: response splitting and cache pollution issue via
    incomplete RFC7230 HTTP request grammar enforcing
    - debian/patches/CVE-2016-8743.patch: enfore stricter parsing in
      include/http_core.h, include/http_protocol.h, include/httpd.h,
      modules/http/http_filters.c, server/core.c, server/gen_test_char.c,
      server/protocol.c, server/util.c, server/vhost.c.
    - debian/patches/hostnames_with_underscores.diff: relax hostname
      restrictions in server/vhost.c.
    - CVE-2016-8743
  * WARNING: The fix for CVE-2016-8743 introduces a behavioural change and
    may introduce compatibility issues with clients that do not strictly
    follow specifications. A new configuration directive,
    "HttpProtocolOptions Unsafe" can be used to re-enable some of the less
    strict parsing restrictions, at the expense of security.

 -- Marc Deslauriers <email address hidden>  Fri, 05 May 2017 10:51:32 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Yakkety
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
httpd
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
apache2_2.4.18.orig.tar.bz2 4.9 MiB 0644b050de41f5c9f67c825285049b144690421acb709b06fe53eddfa8a9fd4c
apache2_2.4.18-2ubuntu4.1.debian.tar.xz 373.5 KiB 4dc448c03c3dbbdfaad3793969055fc0622c4d95a829a46045d5e814be953de0
apache2_2.4.18-2ubuntu4.1.dsc 2.8 KiB d49789199859cc3492169fba96c00acb8c342448e86fedcc80ef4e35c27b9f55

View changes file

Binary packages built by this source

apache2: No summary available for apache2 in ubuntu yakkety.

No description available for apache2 in ubuntu yakkety.

apache2-bin: No summary available for apache2-bin in ubuntu yakkety.

No description available for apache2-bin in ubuntu yakkety.

apache2-bin-dbgsym: No summary available for apache2-bin-dbgsym in ubuntu yakkety.

No description available for apache2-bin-dbgsym in ubuntu yakkety.

apache2-data: No summary available for apache2-data in ubuntu yakkety.

No description available for apache2-data in ubuntu yakkety.

apache2-dbg: No summary available for apache2-dbg in ubuntu yakkety.

No description available for apache2-dbg in ubuntu yakkety.

apache2-dbgsym: No summary available for apache2-dbgsym in ubuntu yakkety.

No description available for apache2-dbgsym in ubuntu yakkety.

apache2-dev: No summary available for apache2-dev in ubuntu yakkety.

No description available for apache2-dev in ubuntu yakkety.

apache2-dev-dbgsym: No summary available for apache2-dev-dbgsym in ubuntu yakkety.

No description available for apache2-dev-dbgsym in ubuntu yakkety.

apache2-doc: No summary available for apache2-doc in ubuntu yakkety.

No description available for apache2-doc in ubuntu yakkety.

apache2-suexec-custom: No summary available for apache2-suexec-custom in ubuntu yakkety.

No description available for apache2-suexec-custom in ubuntu yakkety.

apache2-suexec-custom-dbgsym: No summary available for apache2-suexec-custom-dbgsym in ubuntu yakkety.

No description available for apache2-suexec-custom-dbgsym in ubuntu yakkety.

apache2-suexec-pristine: No summary available for apache2-suexec-pristine in ubuntu yakkety.

No description available for apache2-suexec-pristine in ubuntu yakkety.

apache2-suexec-pristine-dbgsym: No summary available for apache2-suexec-pristine-dbgsym in ubuntu yakkety.

No description available for apache2-suexec-pristine-dbgsym in ubuntu yakkety.

apache2-utils: No summary available for apache2-utils in ubuntu yakkety.

No description available for apache2-utils in ubuntu yakkety.

apache2-utils-dbgsym: No summary available for apache2-utils-dbgsym in ubuntu yakkety.

No description available for apache2-utils-dbgsym in ubuntu yakkety.