apache2_2.4.10-10+deb8u12_amd64.changes ACCEPTED into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
Accepted:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 31 Mar 2018 11:31:57 +0200
Source: apache2
Binary: apache2 apache2-data apache2-bin apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-mpm-itk apache2.2-bin apache2.2-common libapache2-mod-proxy-html libapache2-mod-macro apache2-utils apache2-suexec apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-dbg
Architecture: source amd64 all
Version: 2.4.10-10+deb8u12
Distribution: jessie-security
Urgency: medium
Maintainer: Debian Apache Maintainers <debian-apache@lists.debian.org>
Changed-By: Stefan Fritsch <sf@debian.org>
Description:
apache2 - Apache HTTP Server
apache2-bin - Apache HTTP Server (modules and other binary files)
apache2-data - Apache HTTP Server (common files)
apache2-dbg - Apache debugging symbols
apache2-dev - Apache HTTP Server (development headers)
apache2-doc - Apache HTTP Server (on-site documentation)
apache2-mpm-event - transitional event MPM package for apache2
apache2-mpm-itk - transitional itk MPM package for apache2
apache2-mpm-prefork - transitional prefork MPM package for apache2
apache2-mpm-worker - transitional worker MPM package for apache2
apache2-suexec - transitional package for apache2-suexec-pristine
apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec
apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec
apache2-utils - Apache HTTP Server (utility programs for web servers)
apache2.2-bin - Transitional package for apache2-bin
apache2.2-common - Transitional package for apache2
libapache2-mod-macro - Transitional package for apache2-bin
libapache2-mod-proxy-html - Transitional package for apache2-bin
Changes:
apache2 (2.4.10-10+deb8u12) jessie-security; urgency=medium
.
* CVE-2017-15710: mod_authnz_ldap: Out of bound write in mod_authnz_ldap
when using too small Accept-Language values.
* CVE-2017-15715: <FilesMatch> bypass with a trailing newline in the file
name.
Configure the regular expression engine to match '$' to the end of
the input string only, excluding matching the end of any embedded
newline characters. Behavior can be changed with new directive
'RegexDefaultOptions'.
* CVE-2018-1283: Tampering of mod_session data for CGI applications.
* CVE-2018-1301: Possible out of bound access after failure in reading the
HTTP request
* CVE-2018-1303: Possible out of bound read in mod_cache_socache
* CVE-2018-1312: mod_auth_digest: Weak Digest auth nonce generation
Checksums-Sha1:
3604416d0716bed3457a26ad89dd42245c494167 3281 apache2_2.4.10-10+deb8u12.dsc
1d43186273f7fe4dda27654b73af626db4ebd241 566364 apache2_2.4.10-10+deb8u12.debian.tar.xz
3a30aacbaabaee94ba8c6b11298f0d3183a26703 1158 libapache2-mod-proxy-html_2.4.10-10+deb8u12_amd64.deb
179bc20620b2a32be737370a8fa9363dc08039f1 1144 libapache2-mod-macro_2.4.10-10+deb8u12_amd64.deb
1c3ece302d94bc854abd1859edcdd713dbd91ebd 208468 apache2_2.4.10-10+deb8u12_amd64.deb
840c9b75cb0eb265d0c520f7068e700c8406541a 162778 apache2-data_2.4.10-10+deb8u12_all.deb
91143eb65e0d686b40d243a264daf239ff82cc89 1042246 apache2-bin_2.4.10-10+deb8u12_amd64.deb
cbfac3bb9668f4f98fd6e6849bc2484dd5aac66d 1522 apache2-mpm-worker_2.4.10-10+deb8u12_amd64.deb
773e3816036302c171caa066f117e5ae947e8f0e 1522 apache2-mpm-prefork_2.4.10-10+deb8u12_amd64.deb
e4b4dfb7aed316b3ddd285c82fa5adf0e855871c 1522 apache2-mpm-event_2.4.10-10+deb8u12_amd64.deb
f675722c42428551329c927a0d1037eee80c2f28 1518 apache2-mpm-itk_2.4.10-10+deb8u12_amd64.deb
b71faafee5f71ed6ae7fce367098f98c6d510062 1702 apache2.2-bin_2.4.10-10+deb8u12_amd64.deb
14796e941a2dbb2e3b0ca6f541aa4ecd950e8ba7 125786 apache2.2-common_2.4.10-10+deb8u12_amd64.deb
b95e2488d229f92c10a8b7a45fecf0fc71bfdc13 195980 apache2-utils_2.4.10-10+deb8u12_amd64.deb
82b92399f84e1ab3109939769ea9befa2f831990 1652 apache2-suexec_2.4.10-10+deb8u12_amd64.deb
9721a8f6a4e2204359d982e1eb22d5c5f32ab2e3 130948 apache2-suexec-pristine_2.4.10-10+deb8u12_amd64.deb
f74981893872cd1e29044266a1555ad45ec41eae 132490 apache2-suexec-custom_2.4.10-10+deb8u12_amd64.deb
59018466ac35ba57fb48a11610fcd19e05943678 2735640 apache2-doc_2.4.10-10+deb8u12_all.deb
d4fced7495987f1472519b654cf287f1f57a52d9 283210 apache2-dev_2.4.10-10+deb8u12_amd64.deb
223a6fa2dfcfeea100df6029e87366318b5cd209 1713472 apache2-dbg_2.4.10-10+deb8u12_amd64.deb
Checksums-Sha256:
0b9a1f7b5e6172b5466ae787bc338bb6668d74d39440b1af90d86894dac7a44b 3281 apache2_2.4.10-10+deb8u12.dsc
bf3800808974abdf5feabb799bf138370711c05c5344d4f9c3638b63fd9229a7 566364 apache2_2.4.10-10+deb8u12.debian.tar.xz
3c7467fc2ad26e7cf29949f608576878c6f0e2b5f1a1b917e4466930785fc265 1158 libapache2-mod-proxy-html_2.4.10-10+deb8u12_amd64.deb
4633fe66eacb2ee3faa95ed720fd6e8fcf91350a881f4f3d8d97697343032e69 1144 libapache2-mod-macro_2.4.10-10+deb8u12_amd64.deb
a7890679b519b12578b8fe3485a2a235c8f2d5ee9f6b045e5e218aff9fef1da5 208468 apache2_2.4.10-10+deb8u12_amd64.deb
729373257c6af885437c41022cae424a5ec2f9868e4bb4b76f19b84119632734 162778 apache2-data_2.4.10-10+deb8u12_all.deb
ec45405bdd200ca13a2cebc9eccdeeddf99f87eba886a85af5c31ba9cefd7023 1042246 apache2-bin_2.4.10-10+deb8u12_amd64.deb
183faa81ddd7642ee84d7417a3813263524cf427ec9c71318abbbafe3a1529e3 1522 apache2-mpm-worker_2.4.10-10+deb8u12_amd64.deb
417984c834f8d162a8f452b3ee7c3a7dfecf4e15d942796dfa678a4243080c7e 1522 apache2-mpm-prefork_2.4.10-10+deb8u12_amd64.deb
df125f66157c358bdfac5477f45fcc0ce0b61ebc2c8676f310c468a4a985b271 1522 apache2-mpm-event_2.4.10-10+deb8u12_amd64.deb
e3e1e072ec2b92187523e65da2532cdc91b0590957c572030d97f55b7de438d9 1518 apache2-mpm-itk_2.4.10-10+deb8u12_amd64.deb
b84b872a44448e0a245c4c0ee05e2ef7740328b350ea194828e20897dcf24033 1702 apache2.2-bin_2.4.10-10+deb8u12_amd64.deb
946748233bd9b48b3bf58e536a505050382cd831ddd8e24a84855f876c885a3b 125786 apache2.2-common_2.4.10-10+deb8u12_amd64.deb
aca2d70534594515e9cc0c2501e3bf049fbfb24ebff3aeb58579aaadc0226a8a 195980 apache2-utils_2.4.10-10+deb8u12_amd64.deb
03ded4756df17793765b4a63e71d05ad07e4e3089f2f42af8025ea54f77f5d6b 1652 apache2-suexec_2.4.10-10+deb8u12_amd64.deb
00e63bf384ec083ccf7044a86a2c35d8ffb64bcf86aefad73591ccb9748f1dad 130948 apache2-suexec-pristine_2.4.10-10+deb8u12_amd64.deb
849739f58799bce5a0b012aed434477ed8782eb2d61b01dd7fd13794b9722079 132490 apache2-suexec-custom_2.4.10-10+deb8u12_amd64.deb
a8139eeefe79330cd090f653a6d86bbdeaa27c623f921873d56c06127fe08b75 2735640 apache2-doc_2.4.10-10+deb8u12_all.deb
55de65cbfac123a59a3a1759e56bcbf4b2bce51f38c8e03888845a2eea1e107f 283210 apache2-dev_2.4.10-10+deb8u12_amd64.deb
ebee10a166b3436c101080b9e5d755d0e377e91084a09f716847c613dc6987f5 1713472 apache2-dbg_2.4.10-10+deb8u12_amd64.deb
Files:
7ee5cc0c84b8ea3e0303271e78c3a71a 3281 httpd optional apache2_2.4.10-10+deb8u12.dsc
98d8c905342fdb5ad40f61d49d4c28d8 566364 httpd optional apache2_2.4.10-10+deb8u12.debian.tar.xz
8bbe43be31759baec08506b8fc9e6685 1158 oldlibs extra libapache2-mod-proxy-html_2.4.10-10+deb8u12_amd64.deb
279f1d5fb8ebd2ee8d74f188e11958a5 1144 oldlibs extra libapache2-mod-macro_2.4.10-10+deb8u12_amd64.deb
0c54378f55125582eae37c07bdaab8d5 208468 httpd optional apache2_2.4.10-10+deb8u12_amd64.deb
f612bbc48249799d0c4ba3bc162e258a 162778 httpd optional apache2-data_2.4.10-10+deb8u12_all.deb
71eb52585a761374a45ca338992c0834 1042246 httpd optional apache2-bin_2.4.10-10+deb8u12_amd64.deb
a1f8071d5dda9bf86f9caa974cb14e49 1522 oldlibs extra apache2-mpm-worker_2.4.10-10+deb8u12_amd64.deb
4448e2288674127b62a23fc50ee3ac14 1522 oldlibs extra apache2-mpm-prefork_2.4.10-10+deb8u12_amd64.deb
75269bed5c81297461eeb3316a7a4509 1522 oldlibs extra apache2-mpm-event_2.4.10-10+deb8u12_amd64.deb
0afcb81961332cba955b78cb6bc80979 1518 oldlibs extra apache2-mpm-itk_2.4.10-10+deb8u12_amd64.deb
7c49b8a6b2a39137b0e3f1765759f27a 1702 oldlibs extra apache2.2-bin_2.4.10-10+deb8u12_amd64.deb
6969c577d7c64edbae2a204bf4753030 125786 oldlibs extra apache2.2-common_2.4.10-10+deb8u12_amd64.deb
0474be4cc03675c9e6a0d8da49e17264 195980 httpd optional apache2-utils_2.4.10-10+deb8u12_amd64.deb
6e630dfff14cfb8266fd0e3b884f21c0 1652 oldlibs extra apache2-suexec_2.4.10-10+deb8u12_amd64.deb
588c6a62c060986615189ca03df565ff 130948 httpd optional apache2-suexec-pristine_2.4.10-10+deb8u12_amd64.deb
7590bfffe882308887720c72ea21684e 132490 httpd extra apache2-suexec-custom_2.4.10-10+deb8u12_amd64.deb
a7d69bd67defb7a34255f2cb1e543c59 2735640 doc optional apache2-doc_2.4.10-10+deb8u12_all.deb
e4df7d54d829e32c1c1e9347fc1f4448 283210 httpd optional apache2-dev_2.4.10-10+deb8u12_amd64.deb
0ecd6d7c4e0bac36b6411ed38c078e3d 1713472 debug extra apache2-dbg_2.4.10-10+deb8u12_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQIyBAEBCAAdFiEEOpiNza8JqByyYYsxxodfNUHO/eAFAlq/WLwACgkQxodfNUHO
/eA0JA/3SOPsa2CyGsVqY0FJzY5ZS9W/Vf4cKiZ9kj1+hUCgmk2nDWTSp0g0N4hd
HT5XIXy9a58bCb4t/HEeL+UOr5vmkfSA6csVtzVeDuL4wGDFxUIlmdtHIm5RC8l9
+EhLehBuxzCuIjZtALUYryUaEdSHsw2zhhstihkXiUB4da9OZP2sxyXNb1DYKLTN
D/z3T9IP2E53fVWXSikgGvQzGAhmP9tikPeYpUqo4WK32pOz98iNbSmf+CSv0E70
E0xWXKnZjmjDd4xmUBlbi4+GOE3fa9LOFhsLMD7LYrdGvS/2ccj651C/wthZ7Zez
bhLDpR9LuvPhJeajqQ7YNfc81huniD9t8NdULN5vlVs6/vj7wsxcZPZjo92tPVaa
Y86If2C1mXiGANGLe4/aaWT1ZbmDZV1M7vtfoPnaSb4q9JKFsA8delWzHBzQUpea
VeSzAWabN/MHy6juLIdNSMW9bT5u6jNb9iv1Gz9b88mD3ij7C9RoYNsXLl87hKK1
GTCS58DPON1Cs8AZGZMv7YqcE7n7OkaEmvcXNban0MS30EnhX2M8OI7yqlIaYPfg
EaHH3QQT87+9vRgTuPY/Ail1g6urYfrNKSbVfEUZ4BxSidFo+NrwNpEcXowUhZCj
WMWXbr0pwFncVRz+8JZEYNQPrWbAgaUZJG52Y1OW8FJ1QzqbpA==
=VV60
-----END PGP SIGNATURE-----
Thank you for your contribution to Debian.
Reply to: