Format: 1.8 Date: Wed, 12 Aug 2020 17:35:50 -0400 Source: apache2 Binary: apache2 apache2-data apache2-bin apache2-utils apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-dbg Architecture: ppc64el Version: 2.4.18-2ubuntu3.17 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dbg - Apache debugging symbols apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) Changes: apache2 (2.4.18-2ubuntu3.17) xenial-security; urgency=medium . * SECURITY UPDATE: mod_rewrite redirect issue - debian/patches/CVE-2020-1927-1.patch: factor out default regex flags in include/ap_regex.h, server/core.c, server/util_pcre.c. - debian/patches/CVE-2020-1927-2.patch: add AP_REG_NO_DEFAULT to allow opt-out of pcre defaults in include/ap_regex.h, modules/filters/mod_substitute.c, server/util_pcre.c, server/util_regex.c. - CVE-2020-1927 * SECURITY UPDATE: mod_proxy_ftp uninitialized memory issue - debian/patches/CVE-2020-1934.patch: trap bad FTP responses in modules/proxy/mod_proxy_ftp.c. - CVE-2020-1934 Checksums-Sha1: bb15eca5a54bfed8cb74f350706cbd9242b6edbd 992 apache2-bin-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb e0276649976aa0508e6b21613e63e2d29c28055f 877194 apache2-bin_2.4.18-2ubuntu3.17_ppc64el.deb cee067ac0ec7ead919b204e520bab512f99212c2 2237890 apache2-dbg_2.4.18-2ubuntu3.17_ppc64el.deb 6025205362c9c6df3f1ec5e8f216fcb89bd66288 974 apache2-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb 7d45f846f8c6f06d5e88f20471047a59909c75a2 1116 apache2-dev-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb 97851a4e195bf6754be6c08c541f22cfb0a74e39 173360 apache2-dev_2.4.18-2ubuntu3.17_ppc64el.deb a8caa5298f901c233dd7be47879439be7c78a8dc 978 apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb 229310740f9018f7d6512c4734f4e0bc1c2ddda7 15200 apache2-suexec-custom_2.4.18-2ubuntu3.17_ppc64el.deb f924f866afe14d352cd92b0455b752a6fcc64f59 922 apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb 8a5549e1de723222590ab12d968d0c2fcbe8094e 13656 apache2-suexec-pristine_2.4.18-2ubuntu3.17_ppc64el.deb 774b34d5029c9698cfdfc708175affd5766b6e5a 1198 apache2-utils-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb ff78f4c69f3f8c7ba5555eb33be3e8d4d82fa72f 81016 apache2-utils_2.4.18-2ubuntu3.17_ppc64el.deb 156455c78eb9e92da2fc499f2c960ef1eedcb5dc 86774 apache2_2.4.18-2ubuntu3.17_ppc64el.deb Checksums-Sha256: 5db1dd1ddd2c0752cecb6b0de07fea7d07fb4714866ef4e4327379bce50a0232 992 apache2-bin-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb b2659f86f1e8fbbcfa0a04b4a8246bf763785a9290481a02c48dacf7976d4010 877194 apache2-bin_2.4.18-2ubuntu3.17_ppc64el.deb 8c865f2f004c1123acaeef77b1d2561fe268bc8445de6954fb53809f04cd998b 2237890 apache2-dbg_2.4.18-2ubuntu3.17_ppc64el.deb 0385871b84d7ed36483c7ed8c5774a8a022598d008b78eee331b40d86c7c43da 974 apache2-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb cca11dd8fab53da6bda60ff195dd2251b7d6bb22413790a2784087959fe0477b 1116 apache2-dev-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb c296cd0252390f1cf9011072f7ffaf49c3ff42506344727a9d513a8a54be5fca 173360 apache2-dev_2.4.18-2ubuntu3.17_ppc64el.deb 466515c685eba43b8ff65fe1dd747e63c0297bc5efdae5d46d2c7cf1dbfb95b9 978 apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb 81ba4c60a6ae87c63eb5883482695e92620dd32d3de68bc3069ed9d5b94b141b 15200 apache2-suexec-custom_2.4.18-2ubuntu3.17_ppc64el.deb 6efb602e9e9ce55b6329c8a7e4f2432e0852a3a6ec7295e438f41d2ce6d534c5 922 apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb bb1ec0b6635fff8bf41c2399dd2ed2c319738f5d556d9d05a0c9f5111e0f0849 13656 apache2-suexec-pristine_2.4.18-2ubuntu3.17_ppc64el.deb 14b7041e12b1b81c4e3b1004ea9b49efdfa85a85371c677a97f5960c24bbfd7b 1198 apache2-utils-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb 29df39a5de2586b3210e0aea2c2718a6d94f3955b671fa0b5009cd341b19dd75 81016 apache2-utils_2.4.18-2ubuntu3.17_ppc64el.deb 18e0e17e034441e2dbacd82cb03a0dd0c63c4fa97aa16d10b78adb781e8cd298 86774 apache2_2.4.18-2ubuntu3.17_ppc64el.deb Files: d97db5d29264819dce7d4f764883c892 992 httpd extra apache2-bin-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb 7e1921403b88adf918cc34c3a9e7da9b 877194 httpd optional apache2-bin_2.4.18-2ubuntu3.17_ppc64el.deb 9a007e35ab9a496d667634fc12ec0ff5 2237890 debug extra apache2-dbg_2.4.18-2ubuntu3.17_ppc64el.deb 989ddd41058fff7e407c3266798ebc32 974 httpd extra apache2-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb 509f1f5b25da4ce798a2c9fe1427edb6 1116 httpd extra apache2-dev-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb c124468e535456b49a4b785cbc8203d0 173360 httpd optional apache2-dev_2.4.18-2ubuntu3.17_ppc64el.deb 702fd4e70cd5dcd1d2720ddf94c2df6f 978 httpd extra apache2-suexec-custom-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb cbf8f46079cd50969193444c5f9e67e7 15200 httpd extra apache2-suexec-custom_2.4.18-2ubuntu3.17_ppc64el.deb bacfc14c73d3670b031e437ecc658bf0 922 httpd extra apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb a4d179a947a43e8ca933b8825bebc0e4 13656 httpd optional apache2-suexec-pristine_2.4.18-2ubuntu3.17_ppc64el.deb 920d50a71320832dc37f9e6ade0c4020 1198 httpd extra apache2-utils-dbgsym_2.4.18-2ubuntu3.17_ppc64el.ddeb 27b26541e74476de8cc1e21d5108b8bd 81016 httpd optional apache2-utils_2.4.18-2ubuntu3.17_ppc64el.deb 1fecc85b4989745247d9cc792196fd54 86774 httpd optional apache2_2.4.18-2ubuntu3.17_ppc64el.deb Original-Maintainer: Debian Apache Maintainers