Ubuntu
apache2 package

apache2 2.4.25-3ubuntu2.1 source package in Ubuntu

Changelog

apache2 (2.4.25-3ubuntu2.1) zesty-security; urgency=medium

  * SECURITY UPDATE: authentication bypass in ap_get_basic_auth_pw()
    - debian/patches/CVE-2017-3167.patch: deprecate and replace
      ap_get_basic_auth_pw in include/ap_mmn.h, include/http_protocol.h,
      server/protocol.c, server/request.c.
    - CVE-2017-3167
  * SECURITY UPDATE: NULL pointer deref in ap_hook_process_connection()
    - debian/patches/CVE-2017-3169.patch: fix ctx passed to
      ssl_io_filter_error() in modules/ssl/ssl_engine_io.c.
    - CVE-2017-3169
  * SECURITY UPDATE: denial of service and possible incorrect value return
    in HTTP strict parsing changes
    - debian/patches/CVE-2017-7668.patch: short-circuit on NULL in
      server/util.c.
    - CVE-2017-7668
  * SECURITY UPDATE: mod_mime DoS via crafted Content-Type response header
    - debian/patches/CVE-2017-7679.patch: fix quoted pair scanning in
      modules/http/mod_mime.c.
    - CVE-2017-7679

 -- Marc Deslauriers <email address hidden>  Mon, 26 Jun 2017 07:50:10 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Zesty
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
httpd
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
apache2_2.4.25.orig.tar.bz2 6.1 MiB f87ec2df1c9fee3e6bfde3c8b855a3ddb7ca1ab20ca877bd0e2b6bf3f05c80b2
apache2_2.4.25-3ubuntu2.1.debian.tar.xz 698.7 KiB a3592f3304dcd56cbae9d7115bc589e92cc5021f724beb4cb6b9248a47da659c
apache2_2.4.25-3ubuntu2.1.dsc 3.0 KiB 76992161fa6b667e7cda8dcbf456cb45ad8fc0124b6fa58fbf4c5fe2a3309f5f

View changes file

Binary packages built by this source

apache2: No summary available for apache2 in ubuntu zesty.

No description available for apache2 in ubuntu zesty.

apache2-bin: No summary available for apache2-bin in ubuntu zesty.

No description available for apache2-bin in ubuntu zesty.

apache2-bin-dbgsym: No summary available for apache2-bin-dbgsym in ubuntu zesty.

No description available for apache2-bin-dbgsym in ubuntu zesty.

apache2-data: No summary available for apache2-data in ubuntu zesty.

No description available for apache2-data in ubuntu zesty.

apache2-dbg: No summary available for apache2-dbg in ubuntu zesty.

No description available for apache2-dbg in ubuntu zesty.

apache2-dbgsym: No summary available for apache2-dbgsym in ubuntu zesty.

No description available for apache2-dbgsym in ubuntu zesty.

apache2-dev: No summary available for apache2-dev in ubuntu zesty.

No description available for apache2-dev in ubuntu zesty.

apache2-dev-dbgsym: No summary available for apache2-dev-dbgsym in ubuntu zesty.

No description available for apache2-dev-dbgsym in ubuntu zesty.

apache2-doc: No summary available for apache2-doc in ubuntu zesty.

No description available for apache2-doc in ubuntu zesty.

apache2-ssl-dev: No summary available for apache2-ssl-dev in ubuntu zesty.

No description available for apache2-ssl-dev in ubuntu zesty.

apache2-ssl-dev-dbgsym: No summary available for apache2-ssl-dev-dbgsym in ubuntu zesty.

No description available for apache2-ssl-dev-dbgsym in ubuntu zesty.

apache2-suexec-custom: No summary available for apache2-suexec-custom in ubuntu zesty.

No description available for apache2-suexec-custom in ubuntu zesty.

apache2-suexec-custom-dbgsym: No summary available for apache2-suexec-custom-dbgsym in ubuntu zesty.

No description available for apache2-suexec-custom-dbgsym in ubuntu zesty.

apache2-suexec-pristine: No summary available for apache2-suexec-pristine in ubuntu zesty.

No description available for apache2-suexec-pristine in ubuntu zesty.

apache2-suexec-pristine-dbgsym: No summary available for apache2-suexec-pristine-dbgsym in ubuntu zesty.

No description available for apache2-suexec-pristine-dbgsym in ubuntu zesty.

apache2-utils: No summary available for apache2-utils in ubuntu zesty.

No description available for apache2-utils in ubuntu zesty.

apache2-utils-dbgsym: No summary available for apache2-utils-dbgsym in ubuntu zesty.

No description available for apache2-utils-dbgsym in ubuntu zesty.