Format: 1.8 Date: Mon, 26 Aug 2019 06:43:29 -0700 Source: apache2 Binary: apache2 apache2-data apache2-bin apache2-utils apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-dbg Architecture: s390x Version: 2.4.18-2ubuntu3.12 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Steve Beattie Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dbg - Apache debugging symbols apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) Changes: apache2 (2.4.18-2ubuntu3.12) xenial-security; urgency=medium . * SECURITY UPDATE: Limited cross-site scripting in mod_proxy error page. - d/p/CVE-2019-10092-1.patch: Remove request details from built-in error documents. - d/p/CVE-2019-10092-2.patch: Add missing log numbers. - d/p/CVE-2019-10092-3.patch: mod_proxy: Improve XSRF/XSS protection. - CVE-2019-10092 * SECURITY UPDATE: mod_rewrite potential open redirect. - d/p/CVE-2019-10098.patch: Set PCRE_DOTALL by default. - CVE-2019-10098 Checksums-Sha1: 438f47c9550d47a8a8a8d8ba7ea6ae5990a7b51d 994 apache2-bin-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb 5bfc6e157fe185af5074459ba83f5c4119f461aa 871594 apache2-bin_2.4.18-2ubuntu3.12_s390x.deb b805dac2d442f4dcedb96e1832139006bfcb8a5f 1886708 apache2-dbg_2.4.18-2ubuntu3.12_s390x.deb 2a76a5e0fe138a2968a80582889eab90f02955ba 972 apache2-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb 843d173464238a88b544663fc89876cfd14f4d2f 1110 apache2-dev-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb 5cf3c8f7ff65708441207e5c7dd7205e5e399ec9 173190 apache2-dev_2.4.18-2ubuntu3.12_s390x.deb 9d31a90705db27d7853b1dcf8dcc8c12c2306e65 978 apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb 49b0d615b51f8845804e19201d3e764b37a23c75 15156 apache2-suexec-custom_2.4.18-2ubuntu3.12_s390x.deb 9074a31265eeb11a79f8463aaacf56ed3b48afe0 922 apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb 3b69579006d6513b521f26e2d97a1b26b98dadbd 13554 apache2-suexec-pristine_2.4.18-2ubuntu3.12_s390x.deb 1c04a337ab8883588849be297c1654a944872c22 1198 apache2-utils-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb bcc2c1843e1f1538fbf27772b487b1d41eabe9b1 81792 apache2-utils_2.4.18-2ubuntu3.12_s390x.deb 90913139e7076e22ef931297d343526487049a77 86456 apache2_2.4.18-2ubuntu3.12_s390x.deb Checksums-Sha256: a1e256e9f280953b82fd6403a96b548737b44064ff0fdbe041532ab72faf7f8a 994 apache2-bin-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb 5f246c67403ac835b4006f61e9b092a48519c09998b4548a473bed381f54af93 871594 apache2-bin_2.4.18-2ubuntu3.12_s390x.deb ecada8761b43e268fdbcf783b1a2fe632c647173f6309833c96303e931828ed1 1886708 apache2-dbg_2.4.18-2ubuntu3.12_s390x.deb 0cf97aba5d4164b7d82ce37db3d2a4efc86589747e0d0527f1440287c72090e4 972 apache2-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb 6f452283a3f1bd65f5462028088ea64b1a0b9a171f9048bba73a7e9ddc038592 1110 apache2-dev-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb def724b2abd7ab90f084052a6f38a9a3bcda367fa2555a319410b279f789e07d 173190 apache2-dev_2.4.18-2ubuntu3.12_s390x.deb e4f18f4c3261cda31c8e3a16d31f426b6da9960cd282737dbcc4178a1d8500fe 978 apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb 140a0c1ddb1edb347e3db33189a3b6415be8093f648c54658cbd93b5acaa651a 15156 apache2-suexec-custom_2.4.18-2ubuntu3.12_s390x.deb ccb7e704e562d67f4a721fd85e3c10bd8e74c3198324d2298b21bd61f7f220ad 922 apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb d230510c8c73d655116013bf3200740730c6cf3ccf079e3493fd171609139ca7 13554 apache2-suexec-pristine_2.4.18-2ubuntu3.12_s390x.deb 62e419332bf3d0558a704c8488cc3d8e4a3cc0495c698b7e2a06861e0df82b38 1198 apache2-utils-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb 79d52a630df53a46b8f6d0caebda5a2ad2f5510037aeb2144ca6978c03f53581 81792 apache2-utils_2.4.18-2ubuntu3.12_s390x.deb ff20048458afb9196f0e042968cc82b64c4a8341b4179c35ff548b1293439cfc 86456 apache2_2.4.18-2ubuntu3.12_s390x.deb Files: 56f546907dca5960b034b7c1acd0ef6d 994 httpd extra apache2-bin-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb 7af0bde2b0a1171c57accaa17ac9ca37 871594 httpd optional apache2-bin_2.4.18-2ubuntu3.12_s390x.deb a630f56f48cc82c7bec8bef42cf32aa3 1886708 debug extra apache2-dbg_2.4.18-2ubuntu3.12_s390x.deb 86e138fd89b0285622d8fb70a136405c 972 httpd extra apache2-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb e659950a89e9ee9da3e211a4c21ce680 1110 httpd extra apache2-dev-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb beb9775bb5d64968f6b85bb72352dbb9 173190 httpd optional apache2-dev_2.4.18-2ubuntu3.12_s390x.deb 1408eeaf503fdf26e8b185db974d59ac 978 httpd extra apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb 6d32c8828318cc01863f23a90f9613f7 15156 httpd extra apache2-suexec-custom_2.4.18-2ubuntu3.12_s390x.deb 2d02701f989358febfe5a821d051d8c5 922 httpd extra apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb bc2fc4455fc728aa5488d0cc07fc7ccd 13554 httpd optional apache2-suexec-pristine_2.4.18-2ubuntu3.12_s390x.deb 92a5d728f9b181175437695712bb1bbb 1198 httpd extra apache2-utils-dbgsym_2.4.18-2ubuntu3.12_s390x.ddeb a1a10e29badd194e3ca5021cead4afc3 81792 httpd optional apache2-utils_2.4.18-2ubuntu3.12_s390x.deb 78397e1d7401460c659ce687e4594e2c 86456 httpd optional apache2_2.4.18-2ubuntu3.12_s390x.deb Original-Maintainer: Debian Apache Maintainers