Format: 1.8 Date: Wed, 03 Oct 2018 10:41:08 -0400 Source: apache2 Binary: apache2 apache2-data apache2-bin apache2-utils apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-ssl-dev apache2-dbg Architecture: s390x Version: 2.4.29-1ubuntu4.4 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dbg - Apache debugging symbols apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) Changes: apache2 (2.4.29-1ubuntu4.4) bionic-security; urgency=medium . * SECURITY UPDATE: DoS in HTTP/2 via NULL pointer - debian/patches/CVE-2018-1302.patch: remove obsolete stream detach code in modules/http2/h2_bucket_beam.c, modules/http2/h2_stream.c, modules/http2/h2_stream.h. - CVE-2018-1302 * SECURITY UPDATE: DoS in HTTP/2 via worker exhaustion - debian/patches/CVE-2018-1333.patch: always wake up any conditional waits when streams are aborted in modules/http2/h2_bucket_beam.c. - CVE-2018-1333 * SECURITY UPDATE: DoS in HTTP/2 via large SETTINGS frames - debian/patches/CVE-2018-11763.patch: rework connection IO event handling in modules/http2/h2_session.c, modules/http2/h2_session.h, modules/http2/h2_version.h. - CVE-2018-11763 Checksums-Sha1: 273a98fec4fc6dc6914ac6f181941de97de50cc9 978744 apache2-bin_2.4.29-1ubuntu4.4_s390x.deb 1768b64edafcff0a942845d69cb565b61ead3ef1 4079968 apache2-dbg_2.4.29-1ubuntu4.4_s390x.deb 06c053c7e5fad7e104389cb25b2d53d48499ed60 176800 apache2-dev_2.4.29-1ubuntu4.4_s390x.deb 57787c6406a9398329b9d529f69ef5305938eeb2 2400 apache2-ssl-dev_2.4.29-1ubuntu4.4_s390x.deb 55ba5b76d3a5c6df55a5729360e400683160f38e 15076 apache2-suexec-custom_2.4.29-1ubuntu4.4_s390x.deb 5755a2f440e5770c93e67dc06f02f2628801c8fd 13568 apache2-suexec-pristine_2.4.29-1ubuntu4.4_s390x.deb ad27bab436dde33b1e1790111fdbe05567e6c2c3 81080 apache2-utils_2.4.29-1ubuntu4.4_s390x.deb ada64520c17e1c00f913153e4648c08da39280e7 9750 apache2_2.4.29-1ubuntu4.4_s390x.buildinfo 13ae5cf875696f6b318ec73122da0c6514b34924 95076 apache2_2.4.29-1ubuntu4.4_s390x.deb Checksums-Sha256: a4fd1cad76dbf1000e785a616e7ab9d07c6c9032ab77cc6732d35cd5937ff43b 978744 apache2-bin_2.4.29-1ubuntu4.4_s390x.deb dc78bd287452a36787a94c5deb3b6f59eea1e82e90ddf2f27def172154201569 4079968 apache2-dbg_2.4.29-1ubuntu4.4_s390x.deb 553bf8b7e7b8f690dfa948458dcd386219ddb1d1144000d5b28c1319b68695ec 176800 apache2-dev_2.4.29-1ubuntu4.4_s390x.deb 8f09691128f86ca7f0a9f70b53dc46d20d06e6649bc4b414e08c5a1fb0245bef 2400 apache2-ssl-dev_2.4.29-1ubuntu4.4_s390x.deb 61f057034fb3539f52aad8975c7321e1915f1d291be052e56d25d8e66d58e258 15076 apache2-suexec-custom_2.4.29-1ubuntu4.4_s390x.deb 4f35ee66bd458d2e6ba929ce01285883e84f0665d618d485a0c588418c70ef0f 13568 apache2-suexec-pristine_2.4.29-1ubuntu4.4_s390x.deb 184c7e822431787346bd14d3ce07a1b04a03294e82d31f40e4424fe0e93b88d7 81080 apache2-utils_2.4.29-1ubuntu4.4_s390x.deb 62eff137a8aaac4caa9fd49c4e006abac065a91478a2c80da0b922b8733aacaf 9750 apache2_2.4.29-1ubuntu4.4_s390x.buildinfo e05f7d3125a1161b193873f64ac0365a83b7dcdf82436abceed2e80a60d709b2 95076 apache2_2.4.29-1ubuntu4.4_s390x.deb Files: dd01b4cd73bf6201baa532c7a812ae72 978744 httpd optional apache2-bin_2.4.29-1ubuntu4.4_s390x.deb 37cdbf83c544d75b043473fa87880acc 4079968 debug optional apache2-dbg_2.4.29-1ubuntu4.4_s390x.deb 047d3420bbca3f07e76c3ae90b04b5c1 176800 httpd optional apache2-dev_2.4.29-1ubuntu4.4_s390x.deb 720fb3d21030ede877b291f8a6603df6 2400 httpd optional apache2-ssl-dev_2.4.29-1ubuntu4.4_s390x.deb 1ae18eb7daaccea5f9ab56513d187b55 15076 httpd optional apache2-suexec-custom_2.4.29-1ubuntu4.4_s390x.deb e2c6ac0f20be5ca08e324e8cda299c19 13568 httpd optional apache2-suexec-pristine_2.4.29-1ubuntu4.4_s390x.deb 52bf4b517241bdcbb55afb636849282c 81080 httpd optional apache2-utils_2.4.29-1ubuntu4.4_s390x.deb 165eb9bd55d85f58a2db06ba35c46204 9750 httpd optional apache2_2.4.29-1ubuntu4.4_s390x.buildinfo 532a57bf958e63c368792f97bfdcab48 95076 httpd optional apache2_2.4.29-1ubuntu4.4_s390x.deb Original-Maintainer: Debian Apache Maintainers