Format: 1.8 Date: Wed, 08 Mar 2023 11:32:34 -0500 Source: apache2 Binary: apache2 apache2-bin apache2-data apache2-dev apache2-doc apache2-ssl-dev apache2-suexec-custom apache2-suexec-pristine apache2-utils libapache2-mod-md libapache2-mod-proxy-uwsgi Built-For-Profiles: noudeb Architecture: amd64 all Version: 2.4.55-1ubuntu2 Distribution: lunar-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Changes: apache2 (2.4.55-1ubuntu2) lunar; urgency=medium . * SECURITY UPDATE: HTTP request splitting with mod_rewrite and mod_proxy - debian/patches/CVE-2023-25690-1.patch: don't forward invalid query strings in modules/http2/mod_proxy_http2.c, modules/mappers/mod_rewrite.c, modules/proxy/mod_proxy_ajp.c, modules/proxy/mod_proxy_balancer.c, modules/proxy/mod_proxy_http.c, modules/proxy/mod_proxy_wstunnel.c. - debian/patches/CVE-2023-25690-2.patch: Fix missing APLOGNO in modules/http2/mod_proxy_http2.c. - CVE-2023-25690 * SECURITY UPDATE: mod_proxy_uwsgi HTTP response splitting - debian/patches/CVE-2023-27522.patch: stricter backend HTTP response parsing/validation in modules/proxy/mod_proxy_uwsgi.c. - CVE-2023-27522 Checksums-Sha1: 178a35a6c28ad83d003cb81d0f2c59c124fa03f6 3402878 apache2-bin-dbgsym_2.4.55-1ubuntu2_amd64.ddeb bff87bdf25739e9b1f5e408d1e68615a417877ab 1339674 apache2-bin_2.4.55-1ubuntu2_amd64.deb cc2a2b0b998b53adbd8c3b070a9b6405a82a5c8d 163254 apache2-data_2.4.55-1ubuntu2_all.deb 22444819184497beb70c31a91beb3b911ec4988d 197948 apache2-dev_2.4.55-1ubuntu2_amd64.deb 15744a4079f0a4be711b6dd2f9c6facae161a55f 3884552 apache2-doc_2.4.55-1ubuntu2_all.deb 8c066991ad14c7d1828da69fef646727ce49e37b 2988 apache2-ssl-dev_2.4.55-1ubuntu2_amd64.deb d8e5a73375b40cedca25196f5455e07e66b1da49 12806 apache2-suexec-custom-dbgsym_2.4.55-1ubuntu2_amd64.ddeb 3c9dd5c586ab1c8ab9442ca06d184f40d118b261 16218 apache2-suexec-custom_2.4.55-1ubuntu2_amd64.deb 85941ddebbb76903332a5b662a857840e440859a 11554 apache2-suexec-pristine-dbgsym_2.4.55-1ubuntu2_amd64.ddeb 344bc207c8d33ee43f6d7e10f39f74dbfbe8e888 14598 apache2-suexec-pristine_2.4.55-1ubuntu2_amd64.deb cb3e026263c48d17deef3f96f70f24189f274a5d 118390 apache2-utils-dbgsym_2.4.55-1ubuntu2_amd64.ddeb 6ecf94f399f58af6e68a3f9de94b5434dd603bc9 94312 apache2-utils_2.4.55-1ubuntu2_amd64.deb 6026ae052ab1ad7406374f7c05aadcb1a703d3cd 11814 apache2_2.4.55-1ubuntu2_amd64.buildinfo 96e032b0996e987b34c802f0a7915f5f4e58afb0 96992 apache2_2.4.55-1ubuntu2_amd64.deb 8541d58b6b2b961cb1ddffa911e040f018a8d9b7 796 libapache2-mod-md_2.4.55-1ubuntu2_amd64.deb 8da6f8719c80701c78933c70808267a244b224ec 988 libapache2-mod-proxy-uwsgi_2.4.55-1ubuntu2_amd64.deb Checksums-Sha256: dbe435ca2902ccdfd94a729d2bd610c4028e2ce741c98ab9ee6abf09c77ee159 3402878 apache2-bin-dbgsym_2.4.55-1ubuntu2_amd64.ddeb 509d1c04ba130c21c2e571cdc57a18cb65c7ca968c4eb07b5fa74f7f78591c78 1339674 apache2-bin_2.4.55-1ubuntu2_amd64.deb 736e823b53fd3390aa74877a4e15061f1b4a4ce4bceb3ffe9e0ffd3cc24aaf88 163254 apache2-data_2.4.55-1ubuntu2_all.deb fa1b9bbfe861b50b1c56298d7ff7683ab151a55e41f7d5123de7b565ca840076 197948 apache2-dev_2.4.55-1ubuntu2_amd64.deb 7fe181ccf6d8a97e28ddfc5669a53a0aa806f75b021ad7b5d8bf7c81fb9256e4 3884552 apache2-doc_2.4.55-1ubuntu2_all.deb 66e2865801a952d9b1fe74b1ace47a8d0238f47716e6538259d408e6b9d8b941 2988 apache2-ssl-dev_2.4.55-1ubuntu2_amd64.deb 42c3ee941d2e83bf6fe3c3de088a9a3bf5d1649436855fd0936cf775d193241c 12806 apache2-suexec-custom-dbgsym_2.4.55-1ubuntu2_amd64.ddeb 97445bd60df20cf7f239be7ccf1169810694f2851a1fc51ef798b215f978b9bf 16218 apache2-suexec-custom_2.4.55-1ubuntu2_amd64.deb 7d151f740ee4348016c8013267a7e2c83f18401237bd43f70d0aa865bfa8b994 11554 apache2-suexec-pristine-dbgsym_2.4.55-1ubuntu2_amd64.ddeb d86cfb1bece49016ab10bc3a06d4d7925e645f96a166ac76adab69e951666c00 14598 apache2-suexec-pristine_2.4.55-1ubuntu2_amd64.deb b102500f634ca41a9d6073157e90678dafadc24e69a89af2c9561c200026c41e 118390 apache2-utils-dbgsym_2.4.55-1ubuntu2_amd64.ddeb fca70dd8bb685f3341b3aafffceb2970dd3d9c2d1fd31de3bdc15ec139fefb49 94312 apache2-utils_2.4.55-1ubuntu2_amd64.deb c7ce1b6f27e73902b66c2f44e7c09874669b8901db51cdff5596b78e813ea2c5 11814 apache2_2.4.55-1ubuntu2_amd64.buildinfo f6593815b23705dfa4a3f97371eb6cc551fa5c5d9f26c63c1b0c30c668edb806 96992 apache2_2.4.55-1ubuntu2_amd64.deb d787625bc04f90f42b07bd37e7af1785f3321a09b749d87270824984f1751b16 796 libapache2-mod-md_2.4.55-1ubuntu2_amd64.deb 4732b4f6a86db7eb5243c7fdd15b1a15ec8205a0478ebc439286e9e1de79798d 988 libapache2-mod-proxy-uwsgi_2.4.55-1ubuntu2_amd64.deb Files: 49511425195ec5e821f70882e2302736 3402878 debug optional apache2-bin-dbgsym_2.4.55-1ubuntu2_amd64.ddeb a022b332a6b1a6c66823869d9fe03c36 1339674 httpd optional apache2-bin_2.4.55-1ubuntu2_amd64.deb 0437785ea678bbf0c3105d52414afb55 163254 httpd optional apache2-data_2.4.55-1ubuntu2_all.deb e524c07d53bfae41378a3afa61da9358 197948 httpd optional apache2-dev_2.4.55-1ubuntu2_amd64.deb d617baeff9040d929edddd1b7378b500 3884552 doc optional apache2-doc_2.4.55-1ubuntu2_all.deb 81a65fb53438c40484907cd7b2357d69 2988 httpd optional apache2-ssl-dev_2.4.55-1ubuntu2_amd64.deb f72f600dd4795a8281cac79d3d3eb52a 12806 debug optional apache2-suexec-custom-dbgsym_2.4.55-1ubuntu2_amd64.ddeb 026f82d9755be967aea2b4a6f428a20d 16218 httpd optional apache2-suexec-custom_2.4.55-1ubuntu2_amd64.deb 89e41b90516a6820c5411840c3c045ff 11554 debug optional apache2-suexec-pristine-dbgsym_2.4.55-1ubuntu2_amd64.ddeb a182eab637e2454fb66e3940d47f017b 14598 httpd optional apache2-suexec-pristine_2.4.55-1ubuntu2_amd64.deb 2f97d3d29b29c3309f9613b32d218d30 118390 debug optional apache2-utils-dbgsym_2.4.55-1ubuntu2_amd64.ddeb da545dc1dac5d94ae4c92d1e0436a821 94312 httpd optional apache2-utils_2.4.55-1ubuntu2_amd64.deb a92abb85082aa0974eb4cb772e2dd9b6 11814 httpd optional apache2_2.4.55-1ubuntu2_amd64.buildinfo 64ef7bd83e76783938c7fc83532b6e7c 96992 httpd optional apache2_2.4.55-1ubuntu2_amd64.deb b74a4efccc36a91439666b08dd4683da 796 oldlibs optional libapache2-mod-md_2.4.55-1ubuntu2_amd64.deb 2b6fd1829a228484f0df73fa4e703493 988 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.55-1ubuntu2_amd64.deb Original-Maintainer: Debian Apache Maintainers