-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 10 Jun 2021 12:13:06 +0200 Source: apache2 Binary: apache2 apache2-bin apache2-bin-dbgsym apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-custom-dbgsym apache2-suexec-pristine apache2-suexec-pristine-dbgsym apache2-utils apache2-utils-dbgsym libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: armel Version: 2.4.38-3+deb10u5 Distribution: buster-security Urgency: medium Maintainer: armhf Build Daemon (antheil) Changed-By: Yadd Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Closes: 989562 Changes: apache2 (2.4.38-3+deb10u5) buster-security; urgency=medium . * Fix "NULL pointer dereference on specially crafted HTTP/2 request" (Closes: #989562, CVE-2021-31618) * Fix various low security issues (Closes: CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641) and fix related test Checksums-Sha1: c5416137deab603d66b17322cda4a24f412e887e 4607836 apache2-bin-dbgsym_2.4.38-3+deb10u5_armel.deb a3c34ae55b02543408c17a138f5c6ce6af63285c 1120248 apache2-bin_2.4.38-3+deb10u5_armel.deb 06007886412ce939be14ea4436bb2a2913069aec 331396 apache2-dev_2.4.38-3+deb10u5_armel.deb f74fbc6a363b84afab0ec4e82e79fb5e473ce162 2344 apache2-ssl-dev_2.4.38-3+deb10u5_armel.deb 4c04c389a379c3d5b641f865c6e2e3004e4bc339 12572 apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_armel.deb f30b9c1bca855301bfef77fa3c0e2e0558b44a4d 170932 apache2-suexec-custom_2.4.38-3+deb10u5_armel.deb 53daaf0438d13b1e9a3c6484bfd0e44a49868217 11440 apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_armel.deb dfe586e939ef7239ced6c7a6437e3ca579b70209 169476 apache2-suexec-pristine_2.4.38-3+deb10u5_armel.deb d30053d31d39f91520bd0118e4cc36ff5f0c9c25 138280 apache2-utils-dbgsym_2.4.38-3+deb10u5_armel.deb a919a634d7c94bfd34e2fe695bcf8dbd5b596619 236108 apache2-utils_2.4.38-3+deb10u5_armel.deb dd5d871f5db3e8c9ee0082d0e2cbae878575705e 11125 apache2_2.4.38-3+deb10u5_armel-buildd.buildinfo e4a105b64bde0f32916ad33289c5081b18c7556c 251656 apache2_2.4.38-3+deb10u5_armel.deb c1a9dfacec3f7c109e9eb6ffd6e86a3ad4b82a84 948 libapache2-mod-md_2.4.38-3+deb10u5_armel.deb 549828ead70b51521c9303b6b679db2f944a3c52 1132 libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_armel.deb Checksums-Sha256: 8293068723ed37b2a620f2cb2162364ea0e0390f8756629e407a1e686e2a7a1a 4607836 apache2-bin-dbgsym_2.4.38-3+deb10u5_armel.deb 41e3ce01092ecbb99a59641bfcd2861573327980e75463def22a4796ddceb949 1120248 apache2-bin_2.4.38-3+deb10u5_armel.deb 80715a848bb4f91189f4179e5832f72d0a2677fea4cf6b7089100b8c165be8c0 331396 apache2-dev_2.4.38-3+deb10u5_armel.deb 24a4b4c87b0547a233fbd8989441d2ef5d18a72fe26338e5f770b38f0c4a5674 2344 apache2-ssl-dev_2.4.38-3+deb10u5_armel.deb 92836c288d2296019875bf51b66b6d574de696153f35cd66946cb11974f013db 12572 apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_armel.deb f51b3992594ca7d2383a814629e69f4685d3da4bd28784714785c7efea6fd0c8 170932 apache2-suexec-custom_2.4.38-3+deb10u5_armel.deb 2b770a4305c554013d4d838132eff7dde65bd46b3ea3850b41d66fad149245e9 11440 apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_armel.deb eb09dabcd54894503b3e347ef2831f76d3e01c77a94d2fc1cbe1d88d8b8d890c 169476 apache2-suexec-pristine_2.4.38-3+deb10u5_armel.deb 2f4e84a1fb176c933a19de4db00eda70d362799876a7c31019410c123da2d6a0 138280 apache2-utils-dbgsym_2.4.38-3+deb10u5_armel.deb fc43f69c14220307e656ecb278750e07c8f198c9e12b015992de207f8f30d818 236108 apache2-utils_2.4.38-3+deb10u5_armel.deb 6e00bca9f630978393819882d8d167c6e734888848b1a483e3bdbe91b4e392b6 11125 apache2_2.4.38-3+deb10u5_armel-buildd.buildinfo f933b761732ca0d2e8548cc498c88ce1bdae81fdc69cd7e65634dbb6a5fce9ff 251656 apache2_2.4.38-3+deb10u5_armel.deb d74458fc1d7c6b038e290e4d524307d0efff50e7c16a144b2d87d6dfdc10920a 948 libapache2-mod-md_2.4.38-3+deb10u5_armel.deb 196d880cb775f129f83752c34f0d7e6c92b3590233e6ff9c88778ecd2e1026a9 1132 libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_armel.deb Files: 41985101d3b009b63489c422bcc677fa 4607836 debug optional apache2-bin-dbgsym_2.4.38-3+deb10u5_armel.deb fdf455c438e05726c847ac3267155aca 1120248 httpd optional apache2-bin_2.4.38-3+deb10u5_armel.deb 28b945663a6cad2d275d4d9f49a851f9 331396 httpd optional apache2-dev_2.4.38-3+deb10u5_armel.deb 66d8c813e32fd507fe12a94485050f31 2344 httpd optional apache2-ssl-dev_2.4.38-3+deb10u5_armel.deb 00da0b157a5a9a74622be5c34ab04081 12572 debug optional apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_armel.deb 44df9b16f2d8ef98ad3e358841a86b1f 170932 httpd optional apache2-suexec-custom_2.4.38-3+deb10u5_armel.deb 79e9af45098fef119d208995c6c07cd4 11440 debug optional apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_armel.deb 1399ef7cb2d0113120518f8cae87bf13 169476 httpd optional apache2-suexec-pristine_2.4.38-3+deb10u5_armel.deb 025d31662ae9209750a9f9d6e0141561 138280 debug optional apache2-utils-dbgsym_2.4.38-3+deb10u5_armel.deb 43b652cd7ad71ef3cccfc55b42ae3d2d 236108 httpd optional apache2-utils_2.4.38-3+deb10u5_armel.deb bb6532f0fd0881b575a5e3237c5cdfbe 11125 httpd optional apache2_2.4.38-3+deb10u5_armel-buildd.buildinfo df3207ad9063c36477b1cf8aee55eaa9 251656 httpd optional apache2_2.4.38-3+deb10u5_armel.deb fe7b9c3dac4796c9a02e4bc044fc5675 948 oldlibs optional libapache2-mod-md_2.4.38-3+deb10u5_armel.deb 92ccbbb575ab078595a0327ffd41bc32 1132 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5SboDbFZ1ncj/9P+rhekVxncT3kFAmDmF+0ACgkQrhekVxnc T3lVfQ//VyyNo3816q8GSbgYbkyS7VI2JWJAmoAbvyRH0E4VLpizvec39x4xx+3o SSXF+h+T4IEY+q2oNqxJJSAAR4mdUHDrOYy7qGGRFu06XrCgwz2qqSRvE2M5pjzV TwBDyBG/6mOA2BykQgywuFfWe4EOrHdo9QxNdDltAT/QQK3AatU9iFl23JaI10RB zpS/SLgmT3KgwPsDs6hUqeZGIrI/gbJf89gxrFib7hvIvCXe3lfrAAmZoSk5hfYW oVqxIq+L1BBvSiCJwxqSIPDZKpTIZhxdLtl3zcCWQ1IWUw8wymAsHCvAZYNnhqDU uhM7S6FiIu3KDi9ZKP5ugCtjB4ns8/gdWsJf9ddgVnZP/YngrbuK8BMMCvFd0IGR 0RBKnqHtv/dlClU2DoAtwJv0WNj0QiOT9yZOAwklYJi1qKsNYDmAHQ88C97nHcNc dO3f2zE2o03BB/z6WKycSbEZiIZavu8gCCps47E7esTvo/Kj/gWOx5gJfb6uHE7r KNdEY5JyNqJkyCbswBADXla/j4IoRjowhiKAaX9SxpYvyhukuyASiRpIUDsGN3tR daS1HjliYkjOKmQTXnP9jbKthiK481a8QeY92cc6856afiXnD4vWrR3dw1woFKd1 93dDs5wJA2ta1d5IipM5CD8WKH0IxZcjOYFXXJfzekiiyb9Yamc= =ZUfb -----END PGP SIGNATURE-----