Format: 1.8 Date: Mon, 16 Sep 2019 05:36:25 -0700 Source: apache2 Binary: apache2 apache2-bin apache2-data apache2-dev apache2-doc apache2-ssl-dev apache2-suexec-custom apache2-suexec-pristine apache2-utils libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: amd64 all Version: 2.4.38-2ubuntu2.3 Distribution: disco Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Steve Beattie Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Launchpad-Bugs-Fixed: 1842701 Changes: apache2 (2.4.38-2ubuntu2.3) disco-security; urgency=medium . * SECURITY REGRESSION: mod_proxy balancer XSS/CSRF hardening broke browsers which change case in headers and breaks balancers loading in some configurations (LP: #1842701) - drop d/p/CVE-2019-10092-3.patch Checksums-Sha1: 5c0082cb1eabe3683f7aace3299d7a1664f10a03 4713920 apache2-bin-dbgsym_2.4.38-2ubuntu2.3_amd64.ddeb c4814a96fada0e3607859079b4bc53f8e7e08fa5 1155252 apache2-bin_2.4.38-2ubuntu2.3_amd64.deb 150ee1946861c0b0360a563e1f4e4fd21a356e39 163704 apache2-data_2.4.38-2ubuntu2.3_all.deb 91710b71b5f178c906bbf71b5f0923d4f8b5a764 179780 apache2-dev_2.4.38-2ubuntu2.3_amd64.deb 2c21f56543431aa3ce8c20d074a8dd729ec23406 3838684 apache2-doc_2.4.38-2ubuntu2.3_all.deb d33e054aaec73c1fe9aac237b2d1c9b37a91118a 2392 apache2-ssl-dev_2.4.38-2ubuntu2.3_amd64.deb 3dc92fbf904f206eecf47690384553db372b97ac 12916 apache2-suexec-custom-dbgsym_2.4.38-2ubuntu2.3_amd64.ddeb e37c467b00266bafbb4806114f71ef8ec799bd1b 15536 apache2-suexec-custom_2.4.38-2ubuntu2.3_amd64.deb f1925474fac49140b1bc88a33e4294b5b7a1c3a9 11628 apache2-suexec-pristine-dbgsym_2.4.38-2ubuntu2.3_amd64.ddeb e42929964a8fc414b131b00f8bc36b30357a1414 13956 apache2-suexec-pristine_2.4.38-2ubuntu2.3_amd64.deb d25e0b82c3092f13d913d0c3a71344d5d4ace01b 137864 apache2-utils-dbgsym_2.4.38-2ubuntu2.3_amd64.ddeb 08423c39d3989aa5fbe24a3f80181b4eca13dcc5 86808 apache2-utils_2.4.38-2ubuntu2.3_amd64.deb d1960a0c7e8cec1053b0ee04f709df4383c6a5dc 11745 apache2_2.4.38-2ubuntu2.3_amd64.buildinfo 0bd16f7333c4a58915a743b19f23627e779c7f45 95468 apache2_2.4.38-2ubuntu2.3_amd64.deb 1bc405867ff9073b9758ee258b635851bb8ef442 988 libapache2-mod-md_2.4.38-2ubuntu2.3_amd64.deb 66bea388178dc4ed5237587f7c1c76a243e2555a 1172 libapache2-mod-proxy-uwsgi_2.4.38-2ubuntu2.3_amd64.deb Checksums-Sha256: afa36f75927e46a3a3e3d93b8840e095b5eb2a8f0ae51bd9430abf348199390d 4713920 apache2-bin-dbgsym_2.4.38-2ubuntu2.3_amd64.ddeb 4418a8683d5d64d5aafcabb7fc3ac47bcd0fb7d9acdcebd25adf9e00788b9f84 1155252 apache2-bin_2.4.38-2ubuntu2.3_amd64.deb b927d05672f22c9fd169433aa46f4df966cdac6f9d1bc82ad4a731ae257e65b4 163704 apache2-data_2.4.38-2ubuntu2.3_all.deb bb81e731b2012a6b8636eba56279a0cdae46fcf593ea06b085e5d5c27d73d4bb 179780 apache2-dev_2.4.38-2ubuntu2.3_amd64.deb 52ceb1bfc594b4b95620de34a4baf3826396a6bf13d43444c0be6cab54a2ce05 3838684 apache2-doc_2.4.38-2ubuntu2.3_all.deb 40d51b4793a9a78cb06bf87796027c67087c080dc67a88639a4d309094e947d9 2392 apache2-ssl-dev_2.4.38-2ubuntu2.3_amd64.deb 32e4a9e4441859ff5c2574a1501217e51e243d05b3d1aab23ca15b4ad52e6db3 12916 apache2-suexec-custom-dbgsym_2.4.38-2ubuntu2.3_amd64.ddeb de6bc019b51aca916c87d6798f54e9cb37d59e060c336b8b495de45c88528dae 15536 apache2-suexec-custom_2.4.38-2ubuntu2.3_amd64.deb af04f92de231296792d0fc85c915b11b771c88a6aa56fc2dcc52b421344f434a 11628 apache2-suexec-pristine-dbgsym_2.4.38-2ubuntu2.3_amd64.ddeb 34ea5e28fe5c66300d463aa66cbc1270f47cc4a4b27536fcb53ce9bf5c814be2 13956 apache2-suexec-pristine_2.4.38-2ubuntu2.3_amd64.deb a5d832a22975c06b9fc9ee68d8e0f6986463a03439d5852f6665c42b025845ee 137864 apache2-utils-dbgsym_2.4.38-2ubuntu2.3_amd64.ddeb 68f0e3d90d78a88f646c2e872790cd118b859ae56cb22876e6690e3e2587f251 86808 apache2-utils_2.4.38-2ubuntu2.3_amd64.deb bdc0f9c8e3c2f6ba39a3e81675e23c56796bb3edb339045ae8ee65a2d35e7b6a 11745 apache2_2.4.38-2ubuntu2.3_amd64.buildinfo 51702e09884391ae70410b12fda80b4b715640b3c16c15cedb9b9e3d8673fab2 95468 apache2_2.4.38-2ubuntu2.3_amd64.deb 2402b77ff9ca25882bd3930beccb277a663534240932c7b6c86249f8c5e2a99b 988 libapache2-mod-md_2.4.38-2ubuntu2.3_amd64.deb 6d711f367764a49ffb62b04dd98dcdc13b25e2f1df0610de2328e718cbe9dac1 1172 libapache2-mod-proxy-uwsgi_2.4.38-2ubuntu2.3_amd64.deb Files: ce12f720045577c483a53bf257a1bb34 4713920 debug optional apache2-bin-dbgsym_2.4.38-2ubuntu2.3_amd64.ddeb 3ea2297ce3d8cec5cce688c01245ff66 1155252 httpd optional apache2-bin_2.4.38-2ubuntu2.3_amd64.deb 9262fa897d76872243194447d91400af 163704 httpd optional apache2-data_2.4.38-2ubuntu2.3_all.deb b8f71a8be8914306a9d9289618e69d99 179780 httpd optional apache2-dev_2.4.38-2ubuntu2.3_amd64.deb 1dcb7eb084fd37e34cf057a8b2590a56 3838684 doc optional apache2-doc_2.4.38-2ubuntu2.3_all.deb 6056f84d09b1f3e85da9b30fc3143310 2392 httpd optional apache2-ssl-dev_2.4.38-2ubuntu2.3_amd64.deb c2dc071ad48a89782754715b1dd6b515 12916 debug optional apache2-suexec-custom-dbgsym_2.4.38-2ubuntu2.3_amd64.ddeb 267713906dc3858ab4b67521349b6186 15536 httpd optional apache2-suexec-custom_2.4.38-2ubuntu2.3_amd64.deb fa3909c9e13db98b4cd6739c1e19d667 11628 debug optional apache2-suexec-pristine-dbgsym_2.4.38-2ubuntu2.3_amd64.ddeb 96db5ab55657d4f52ec6d1e574a723e2 13956 httpd optional apache2-suexec-pristine_2.4.38-2ubuntu2.3_amd64.deb 7853a7bc6be917d4a6db13b2549b854a 137864 debug optional apache2-utils-dbgsym_2.4.38-2ubuntu2.3_amd64.ddeb c2e1f2bc043419e2ff7a6c0aacbec4b2 86808 httpd optional apache2-utils_2.4.38-2ubuntu2.3_amd64.deb e45509b20fc1c1472f9fb601278a9c30 11745 httpd optional apache2_2.4.38-2ubuntu2.3_amd64.buildinfo 318ec9da3ec69942cd0d77ccdd968bea 95468 httpd optional apache2_2.4.38-2ubuntu2.3_amd64.deb 56955473060848bd49e26e0495bf2ffe 988 oldlibs optional libapache2-mod-md_2.4.38-2ubuntu2.3_amd64.deb c560c2967add0e5c853ced3e16733723 1172 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.38-2ubuntu2.3_amd64.deb Original-Maintainer: Debian Apache Maintainers