Format: 1.8 Date: Mon, 26 Jun 2017 07:57:04 -0400 Source: apache2 Binary: apache2 apache2-data apache2-bin apache2-utils apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-dbg Architecture: powerpc Version: 2.4.18-2ubuntu4.2 Distribution: yakkety Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dbg - Apache debugging symbols apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) Changes: apache2 (2.4.18-2ubuntu4.2) yakkety-security; urgency=medium . * SECURITY UPDATE: authentication bypass in ap_get_basic_auth_pw() - debian/patches/CVE-2017-3167.patch: deprecate and replace ap_get_basic_auth_pw in include/ap_mmn.h, include/http_protocol.h, server/protocol.c, server/request.c. - CVE-2017-3167 * SECURITY UPDATE: NULL pointer deref in ap_hook_process_connection() - debian/patches/CVE-2017-3169.patch: fix ctx passed to ssl_io_filter_error() in modules/ssl/ssl_engine_io.c. - CVE-2017-3169 * SECURITY UPDATE: denial of service and possible incorrect value return in HTTP strict parsing changes - debian/patches/CVE-2017-7668.patch: short-circuit on NULL in server/util.c. - CVE-2017-7668 * SECURITY UPDATE: mod_mime DoS via crafted Content-Type response header - debian/patches/CVE-2017-7679.patch: fix quoted pair scanning in modules/http/mod_mime.c. - CVE-2017-7679 Checksums-Sha1: d9bb268fa79c26d3680a0d2663b702e3ba1c1c43 988 apache2-bin-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb 74b38b0bd29415c10b663ea2729d482d6d4b5240 803046 apache2-bin_2.4.18-2ubuntu4.2_powerpc.deb c642644b5c8cb9af22aaaca72689096bd6fe8127 2124220 apache2-dbg_2.4.18-2ubuntu4.2_powerpc.deb b5c0701ebea7d35d7764b9d81e4e81ba021ca487 970 apache2-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb e4e5183c140023ab301096fc4e822d497a326290 1108 apache2-dev-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb 34989a7ea8abde0455524082a8f26a788ada2940 172938 apache2-dev_2.4.18-2ubuntu4.2_powerpc.deb 4f4c7894c83a6534ca605db1bdf1788033cbd8a4 974 apache2-suexec-custom-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb e7f4d7ac9eee0aef3dfc5a26db38079a10e61be3 14906 apache2-suexec-custom_2.4.18-2ubuntu4.2_powerpc.deb a839780380a8a89ed800f2f18ae025269434e6d4 918 apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb f001e1e44b818fd9ef3258aa64002cde75abe4c1 13356 apache2-suexec-pristine_2.4.18-2ubuntu4.2_powerpc.deb 285bea0f95435e8af2f9f7e9f4803a689c680fd7 1190 apache2-utils-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb 6ee2d8202619b959ca01cb7d08b9d59bcdad6978 83328 apache2-utils_2.4.18-2ubuntu4.2_powerpc.deb c6cb76580545bf8275def00c609c0fd6bf5663df 86344 apache2_2.4.18-2ubuntu4.2_powerpc.deb Checksums-Sha256: b12433cb58289f867456e7bd688986352cccbe885f2215598c1f6777c3f007d8 988 apache2-bin-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb 4de8732579de47d4d030d51d7dc159d2875559dbf403a72b6eae4835990991da 803046 apache2-bin_2.4.18-2ubuntu4.2_powerpc.deb c164825dc52dd2f6788b2ff2673ca02ac0df3bcfb3cf5828db5f6b408046412a 2124220 apache2-dbg_2.4.18-2ubuntu4.2_powerpc.deb 7ddb3524794ddb55b87993d5c8c118297fe5fe1caf76892e7a0bcae7afe20d88 970 apache2-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb dd3c85f47e8ee81faf4aea43e34f5623e9ca83c30d057925b501875bba8389a3 1108 apache2-dev-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb d8a993a9c12bb058144013c52171fcb8db88458de4c62ae126494a2458441c30 172938 apache2-dev_2.4.18-2ubuntu4.2_powerpc.deb bfb10d10861bf541896afd0229c908ef36a08754f23e9bd2fba743cef5e12774 974 apache2-suexec-custom-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb 2c29a8eb1b273d3b7f38ab2f98dedf4d78cd6a250b85d1b2be442e451d090936 14906 apache2-suexec-custom_2.4.18-2ubuntu4.2_powerpc.deb 351521c1990d045e2d5bc44c191a9f2c81cfe79598d010de6807a7079b2f6116 918 apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb 657db8cc58b6b8c4f6ea2fc6fc123fe28ae58b2618221b280c80365557f6a95a 13356 apache2-suexec-pristine_2.4.18-2ubuntu4.2_powerpc.deb 2147e5fd948c3ee52cdaac0d188f7092c2626802ca09f12d4382c55d7730453e 1190 apache2-utils-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb 04a630d2452cb11e29c5cbc4f45956e734c272ed6ef7826f1e194b70ad32103e 83328 apache2-utils_2.4.18-2ubuntu4.2_powerpc.deb 148ecbd3f982e695e8a50e82f524a31589875d764784782466de473948525871 86344 apache2_2.4.18-2ubuntu4.2_powerpc.deb Files: 71f548fd5dac44212d473493acc54157 988 httpd extra apache2-bin-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb 0259f06a6670b2b168dbf796dd8e4dc0 803046 httpd optional apache2-bin_2.4.18-2ubuntu4.2_powerpc.deb e1da2485b25d16934e3c679518e8265a 2124220 debug extra apache2-dbg_2.4.18-2ubuntu4.2_powerpc.deb 415f712a6f8d805dfdf0c9df1408da9d 970 httpd extra apache2-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb 2fee35b7bfce3ef91306595748e578e7 1108 httpd extra apache2-dev-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb 506b53a22b3301be53748f98b1386b06 172938 httpd optional apache2-dev_2.4.18-2ubuntu4.2_powerpc.deb 03d3c8717b6c26d3c80ed48888fde240 974 httpd extra apache2-suexec-custom-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb 4c915b3faf26547577e9da1a36c8db0b 14906 httpd extra apache2-suexec-custom_2.4.18-2ubuntu4.2_powerpc.deb 0fa14abfbd0eec8bfed021931479820d 918 httpd extra apache2-suexec-pristine-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb 8374c23c51639a4807d5d5d3fea3de3b 13356 httpd optional apache2-suexec-pristine_2.4.18-2ubuntu4.2_powerpc.deb 79258327343de5865d49160f6d04f735 1190 httpd extra apache2-utils-dbgsym_2.4.18-2ubuntu4.2_powerpc.ddeb 65d0338e443cf5997c745c0ae964823c 83328 httpd optional apache2-utils_2.4.18-2ubuntu4.2_powerpc.deb 7e9e1e33acc57fedcd4b1ddeefb3b5cf 86344 httpd optional apache2_2.4.18-2ubuntu4.2_powerpc.deb Original-Maintainer: Debian Apache Maintainers