Format: 1.8 Date: Thu, 16 Dec 2021 14:09:26 -0800 Source: apache2 Binary: apache2 apache2-bin apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-pristine apache2-utils libapache2-mod-md libapache2-mod-proxy-uwsgi Built-For-Profiles: noudeb Architecture: riscv64 Version: 2.4.51-2ubuntu1 Distribution: jammy-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Bryce Harrington Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Changes: apache2 (2.4.51-2ubuntu1) jammy; urgency=medium . * Merge with Debian unstable. Remaining changes: - debian/{control, apache2.install, apache2-utils.ufw.profile, apache2.dirs}: Add ufw profiles. (LP 261198) - debian/apache2.py, debian/apache2-bin.install: Add apport hook. (LP 609177) - d/index.html, d/icons/ubuntu-logo.png, d/apache2.postrm, d/s/include-binaries: replace Debian with Ubuntu on default page and add Ubuntu icon file. (LP 1288690) - d/p/support-openssl3-*.patch: Backport various patches from https://github.com/apache/httpd/pull/258 in order to fix mod_ssl's failure to load when using OpenSSL 3. (LP #1951476) * Dropped: - d/apache2ctl: Also use systemd for graceful if it is in use. (LP: 1832182) [This introduced a performance regression.] - d/apache2ctl: Also use /run/systemd to check for systemd usage. (LP 1918209) [Not needed] - debian/patches/CVE-2021-33193.patch: refactor request parsing in include/ap_mmn.h, include/http_core.h, include/http_protocol.h, include/http_vhost.h, modules/http2/h2_request.c, server/core.c, server/core_filters.c, server/protocol.c, server/vhost.c. [Fixed in 2.4.48-4] - debian/patches/CVE-2021-34798.patch: add NULL check in server/scoreboard.c. [Fixed in 2.4.49-1] - debian/patches/CVE-2021-36160.patch: fix PATH_INFO setting for generic worker in modules/proxy/mod_proxy_uwsgi.c. [Fixed in 2.4.49-1] - debian/patches/CVE-2021-39275.patch: fix ap_escape_quotes substitution logic in server/util.c. [Fixed in 2.4.49-1] - arbitrary origin server via crafted request uri-path + debian/patches/CVE-2021-40438-pre1.patch: faster unix socket path parsing in the "proxy:" URL in modules/proxy/mod_proxy.c, modules/proxy/proxy_util.c. + debian/patches/CVE-2021-40438.patch: add sanity checks on the configured UDS path in modules/proxy/proxy_util.c. [Fixed in 2.4.49-3] - SECURITY REGRESSION: Issues in UDS URIs. (LP #1945311) + debian/patches/CVE-2021-40438-2.patch: Fix UDS unix: scheme for P rules in modules/mappers/mod_rewrite.c. + debian/patches/CVE-2021-40438-3.patch: Handle UDS URIs with empty hostname in modules/mappers/mod_rewrite.c, modules/proxy/proxy_util.c. [Fixed in 2.4.49-3] Checksums-Sha1: 99db8f29ecc4ae93dedacec8ff383b9219983a41 3697010 apache2-bin-dbgsym_2.4.51-2ubuntu1_riscv64.ddeb 1f6b91759dfd23bea0d4048853f02920e73f7f9a 1154016 apache2-bin_2.4.51-2ubuntu1_riscv64.deb 0312385d2d740859edd50eeb94e183f61b6ff566 189466 apache2-dev_2.4.51-2ubuntu1_riscv64.deb 95731df125c4afc02af27ed362120ca66381a5d9 2980 apache2-ssl-dev_2.4.51-2ubuntu1_riscv64.deb d9c9c3f13b45b9db9f2a845fbe920dc4ad171201 12658 apache2-suexec-custom-dbgsym_2.4.51-2ubuntu1_riscv64.ddeb 0f9190e30f00a0f4cb403f5e1326e23ce9ceb24f 15584 apache2-suexec-custom_2.4.51-2ubuntu1_riscv64.deb a1f0f9e9d157a0abbe9efb6a8acc711ee05fad5f 11450 apache2-suexec-pristine-dbgsym_2.4.51-2ubuntu1_riscv64.ddeb 7f3316404a8d1b7edcfb053d781185f34af1bed1 14046 apache2-suexec-pristine_2.4.51-2ubuntu1_riscv64.deb c61baaa6197633165c5e52d0069a87c9f0597504 119024 apache2-utils-dbgsym_2.4.51-2ubuntu1_riscv64.ddeb 6993a36be56b3e3bf93da8448f0c6295ee4c2b97 83116 apache2-utils_2.4.51-2ubuntu1_riscv64.deb f1b420dedfa1c7cdff2caa2de90f52c5f5ab9621 11258 apache2_2.4.51-2ubuntu1_riscv64.buildinfo 097a6b609fccb465502ed739db07ae07e6d2e260 97968 apache2_2.4.51-2ubuntu1_riscv64.deb ba0b6775698a4c4a7a3bca5c832652eafb5d4890 806 libapache2-mod-md_2.4.51-2ubuntu1_riscv64.deb 8def752a89ab00a37d4fadb368b4b1ade365e508 986 libapache2-mod-proxy-uwsgi_2.4.51-2ubuntu1_riscv64.deb Checksums-Sha256: a01af321873535cc939daba79d5bccf495a3f185f7a00746b0b64371b58003fe 3697010 apache2-bin-dbgsym_2.4.51-2ubuntu1_riscv64.ddeb 1ebe44aa74ff8548cec2a7eeea7a1f08bb190aa297bb4e9daef04a2ed9a01678 1154016 apache2-bin_2.4.51-2ubuntu1_riscv64.deb 0f627724c811b25085a2127cc6052e3ecd0938dc74493607e3a2b686ed233d45 189466 apache2-dev_2.4.51-2ubuntu1_riscv64.deb 6bd0021cf86d868fa62fe44e34841cb85a3c0537c5c2ea1ed893e51869a71c6e 2980 apache2-ssl-dev_2.4.51-2ubuntu1_riscv64.deb 62b5898a98af46070caa25b363f55782be26ab49a96768b042c7f7088057f2dd 12658 apache2-suexec-custom-dbgsym_2.4.51-2ubuntu1_riscv64.ddeb 8acb046505f491a5f7e729b6ff1bd8409bd8c69e529ac0d9f72764b056fd5d57 15584 apache2-suexec-custom_2.4.51-2ubuntu1_riscv64.deb 6f3ba73ac743807acd3213900cfb060c550a4a77770fc45191c18dc5df01564b 11450 apache2-suexec-pristine-dbgsym_2.4.51-2ubuntu1_riscv64.ddeb 8c63aa61fa89221289690fb07cbd69ca14db0096adc049b2d652d7fad70629b0 14046 apache2-suexec-pristine_2.4.51-2ubuntu1_riscv64.deb b6736d9fbc58454a9a51d530c658364240c01b25e35cf8c20fb9e9a162b6761a 119024 apache2-utils-dbgsym_2.4.51-2ubuntu1_riscv64.ddeb 91dcd3e12b9b0b261c7fe71c191853daeaff44c95e3c99f12e372205ab97ac88 83116 apache2-utils_2.4.51-2ubuntu1_riscv64.deb 1c346dfecc63c9c21327c4bf6b8435484da9e20c959f1daa353e3074997102ed 11258 apache2_2.4.51-2ubuntu1_riscv64.buildinfo 55a1718ddba005e9bad491410d875ee5c06134d9da85e17da6773f69865161f5 97968 apache2_2.4.51-2ubuntu1_riscv64.deb 7c05341134082cc677ff391da5107035447d33b228ea7d8dba7d8810832dcc87 806 libapache2-mod-md_2.4.51-2ubuntu1_riscv64.deb fcf729e8be0ca73db1d9cda5bf3be35881bcaff215195620f41b07d033c00b3e 986 libapache2-mod-proxy-uwsgi_2.4.51-2ubuntu1_riscv64.deb Files: b81cdfb4854f831daddc3e67cb2e72eb 3697010 debug optional apache2-bin-dbgsym_2.4.51-2ubuntu1_riscv64.ddeb 13f4051b020fe27740f5fdabbf23940e 1154016 httpd optional apache2-bin_2.4.51-2ubuntu1_riscv64.deb 1b1b694e0d11ef3cbad090bf9831408d 189466 httpd optional apache2-dev_2.4.51-2ubuntu1_riscv64.deb 44327413dc7cebebc1fd2e5f595b04f3 2980 httpd optional apache2-ssl-dev_2.4.51-2ubuntu1_riscv64.deb 7d6db533f7360e0a41fb9f5ebde84c96 12658 debug optional apache2-suexec-custom-dbgsym_2.4.51-2ubuntu1_riscv64.ddeb dc97294bceedef868b3f206ce4cf0158 15584 httpd optional apache2-suexec-custom_2.4.51-2ubuntu1_riscv64.deb e06545adbebdce44a926ea1d81afc723 11450 debug optional apache2-suexec-pristine-dbgsym_2.4.51-2ubuntu1_riscv64.ddeb 273af3bfb57d5ede0c8b889324043bc8 14046 httpd optional apache2-suexec-pristine_2.4.51-2ubuntu1_riscv64.deb a5ee72e8f04c16b7a6f7d26aac279657 119024 debug optional apache2-utils-dbgsym_2.4.51-2ubuntu1_riscv64.ddeb 9aed50e8b1a4f5aedafd5acf1d2a374c 83116 httpd optional apache2-utils_2.4.51-2ubuntu1_riscv64.deb 337d628d2bdb042c9ae745e4d0db0266 11258 httpd optional apache2_2.4.51-2ubuntu1_riscv64.buildinfo 721f29ad74bb66b913f768eb1b93947b 97968 httpd optional apache2_2.4.51-2ubuntu1_riscv64.deb d7602511937129b4dc282b1459529c8e 806 oldlibs optional libapache2-mod-md_2.4.51-2ubuntu1_riscv64.deb 9d68e12e07f8cbc3c701d266a053b3f2 986 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.51-2ubuntu1_riscv64.deb Original-Maintainer: Debian Apache Maintainers