-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 10 Jun 2021 12:13:06 +0200 Source: apache2 Binary: apache2 apache2-bin apache2-bin-dbgsym apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-custom-dbgsym apache2-suexec-pristine apache2-suexec-pristine-dbgsym apache2-utils apache2-utils-dbgsym libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: arm64 Version: 2.4.38-3+deb10u5 Distribution: buster-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Yadd Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Closes: 989562 Changes: apache2 (2.4.38-3+deb10u5) buster-security; urgency=medium . * Fix "NULL pointer dereference on specially crafted HTTP/2 request" (Closes: #989562, CVE-2021-31618) * Fix various low security issues (Closes: CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641) and fix related test Checksums-Sha1: 7d257af5872928dc755a398eaa4f236f40fcd3aa 4726132 apache2-bin-dbgsym_2.4.38-3+deb10u5_arm64.deb 258ba9175017d7e56acd967891a3eed20cdab3bd 1208148 apache2-bin_2.4.38-3+deb10u5_arm64.deb 04ff6e281e9d8bd71c973432795c1825f2fd0b55 331376 apache2-dev_2.4.38-3+deb10u5_arm64.deb 748c7152c776743da4abc4e400c34e94cf2a7282 2348 apache2-ssl-dev_2.4.38-3+deb10u5_arm64.deb ae8771a8390e3fd9e49db2fdb2b10636983b5996 12992 apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_arm64.deb c7ff3c6aef9f0932aa9b1bcd3c768b35ed1cc8ff 171564 apache2-suexec-custom_2.4.38-3+deb10u5_arm64.deb b5c1b038e09e6d0063a2c47990906bb5dca27b8a 11836 apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_arm64.deb 4177262e8deaf4076390252ead97a6feec181907 170112 apache2-suexec-pristine_2.4.38-3+deb10u5_arm64.deb 19278010fdcd2c4153ffc2733e534609c334f5d5 140512 apache2-utils-dbgsym_2.4.38-3+deb10u5_arm64.deb 564c685e43e84a6889d4e966aba389b2393cb339 234276 apache2-utils_2.4.38-3+deb10u5_arm64.deb 57ef638698b52bf8cb2ef5aee50923185e5b0e33 11193 apache2_2.4.38-3+deb10u5_arm64-buildd.buildinfo 44cff3f9cd36ac230ffbf05c1b8c39b6caab866a 251660 apache2_2.4.38-3+deb10u5_arm64.deb 8fa980509792c74d5275a8bdc62724a8ac64e457 948 libapache2-mod-md_2.4.38-3+deb10u5_arm64.deb cbd676267db139c017e95249b57924302ffbe546 1132 libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_arm64.deb Checksums-Sha256: 475a0f331c5e2bf1c3fee0c970d28ec5b8b1f17127f9545b61971340b2710f24 4726132 apache2-bin-dbgsym_2.4.38-3+deb10u5_arm64.deb 2c67dcb94d2500fdc166a9b88971158f1cd394ba375b05b0595191166503919c 1208148 apache2-bin_2.4.38-3+deb10u5_arm64.deb f2426c8226f7eefd4d63c3f7135a1f3ad6f8322d7e11e08ed51cf6b03600e9f3 331376 apache2-dev_2.4.38-3+deb10u5_arm64.deb 482fa090118b2bab755417ad4274349c6b7756db2f6ec845db5597fbca163273 2348 apache2-ssl-dev_2.4.38-3+deb10u5_arm64.deb 8288ac2fc54a7341c21d36d36bc4d3f09db9e5b9c60a5c155121c543a54fabcb 12992 apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_arm64.deb f5dafa244857908fdc4fb7b1cdf75e8215455bd9e28a36482c01d856cb77a423 171564 apache2-suexec-custom_2.4.38-3+deb10u5_arm64.deb 8ddb03a425d3c7556c7bf0b584085d19a482d3c129aba7ae054b66597d0ba803 11836 apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_arm64.deb 839222ad5eac07f0e208041691cff51ad20243b3abf4ae112e5df516e6af240f 170112 apache2-suexec-pristine_2.4.38-3+deb10u5_arm64.deb a9eb3502875e9f47c7e8da99f056d7910d5465c031bf66afed5bff2dca575997 140512 apache2-utils-dbgsym_2.4.38-3+deb10u5_arm64.deb 8d3d2969d48a89f0fc3086302410f478ddaf4d95f02e7538fbe1e993252cee57 234276 apache2-utils_2.4.38-3+deb10u5_arm64.deb a8a7aa6464586ccd8e17ea961531c5fa49ad88ee7c6f633cce57f3a6b4eadbbe 11193 apache2_2.4.38-3+deb10u5_arm64-buildd.buildinfo 11c9e984d1839a35dcc1c71e6220a0d257c6de71cd66ae2a186c023e0fdbeea5 251660 apache2_2.4.38-3+deb10u5_arm64.deb 3beccd69768ec2c07078b71c311daa4d22c91b1bd484907350c97d367b01cd75 948 libapache2-mod-md_2.4.38-3+deb10u5_arm64.deb cbfad3f6dcdff3433b0bbc8a78b52958291a40c860e817f142f7ccefe97673e5 1132 libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_arm64.deb Files: b538059937076b7d46fe12f7c2b8f28f 4726132 debug optional apache2-bin-dbgsym_2.4.38-3+deb10u5_arm64.deb cbd6b07791ea10fd5e4983ce17008d4b 1208148 httpd optional apache2-bin_2.4.38-3+deb10u5_arm64.deb 36c1ee6916ce6737828736cb7202813d 331376 httpd optional apache2-dev_2.4.38-3+deb10u5_arm64.deb 53e5030479d0d5bacfb52cfe4b8bff9c 2348 httpd optional apache2-ssl-dev_2.4.38-3+deb10u5_arm64.deb b57a21ae66c5bf7626849ef7afef0444 12992 debug optional apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_arm64.deb 4a6e939f28f82cf9514488f972685e07 171564 httpd optional apache2-suexec-custom_2.4.38-3+deb10u5_arm64.deb 281b7a2c72e8ccd62df8019be066c733 11836 debug optional apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_arm64.deb 387c145f587b3dce3668a427721a5899 170112 httpd optional apache2-suexec-pristine_2.4.38-3+deb10u5_arm64.deb 5f88a5a70001f532213331e6f7843b81 140512 debug optional apache2-utils-dbgsym_2.4.38-3+deb10u5_arm64.deb c5f426aa47a20e3ed44209d9f677ffa4 234276 httpd optional apache2-utils_2.4.38-3+deb10u5_arm64.deb 68d03c7e578e0b24072cf56c2fb0b14f 11193 httpd optional apache2_2.4.38-3+deb10u5_arm64-buildd.buildinfo 4deeecec965401581371d4c8bee32e7b 251660 httpd optional apache2_2.4.38-3+deb10u5_arm64.deb c86e4d42b67eb4a77c9ba10942880fba 948 oldlibs optional libapache2-mod-md_2.4.38-3+deb10u5_arm64.deb 57060c0ab04791bf2d6be2809f7a312a 1132 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEATMECE6lCPIqB83t2Kk8QrDgjIwFAmDmE9gACgkQ2Kk8QrDg jIwBVA//V+Ls0cqb81C8BS++Iv0y+80/CnKpjwP2B/2XUiDm/gVHr6lWtsZr12OO kk41FClteTLvL2kiAUqAH3cHxT1TjWVXk+bSPlNiWhWf2huVGrNa6eLQZyfix9Qb qQeFp3BW2DtAkF0e4MmqRgRXS92dhYb/MCMTG9uCn4nm6cgiHIWrCafqQGsXwf2c iAW8UCg2qDuqL8871urmTyhOI4EuH4rg8mEgijt8S67BjA9m6GMvwTtGkFFILdaf 4FGuH5aN1y3Y1c3V2tMeYlSXmMBSeo7W8RqckIPh6puw/KCJqExPvKozwCfXFMiK qU4I30mOGfrClVt/GD1O6q4eAWK05Sb9coKWqf5Q+05d0+aPY7PEu3Z0NsO1KDY6 mcki0SHWgffU3FUOFxYMFt41EANG/elQFIXKCU/bDR6QpQUSk0GmT0zng3RlPHHB +blU857C8Oszu8/+Ud4vbyfLaWh0Gt1E/Wya52CGmCG2Dsse/uYCqyBbybpGzCMo WKPGtgxPaQSfSiWX34afZY8K0wwxo6uh20gO3E+8hV/gzso4LvIjuxrO9U7fFeEa xzvHb+kzIhwjBAdcJquHgx0uwaW8XiRr65wNht7w+u04LsfplhXt9aBbs6gAPYk+ 5Sw5CWL+nLuyGJwZGjX+Or3qtD4mMS/8Zg9Ry8bXBK5wYiac9m8= =ltrG -----END PGP SIGNATURE-----