-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 10 Jun 2021 12:13:06 +0200 Source: apache2 Binary: apache2 apache2-bin apache2-bin-dbgsym apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-custom-dbgsym apache2-suexec-pristine apache2-suexec-pristine-dbgsym apache2-utils apache2-utils-dbgsym libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: armhf Version: 2.4.38-3+deb10u5 Distribution: buster-security Urgency: medium Maintainer: armhf Build Daemon (antheil) Changed-By: Yadd Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Closes: 989562 Changes: apache2 (2.4.38-3+deb10u5) buster-security; urgency=medium . * Fix "NULL pointer dereference on specially crafted HTTP/2 request" (Closes: #989562, CVE-2021-31618) * Fix various low security issues (Closes: CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641) and fix related test Checksums-Sha1: fc18d99d33647e6037f50492a4bf47e270142a1a 4670408 apache2-bin-dbgsym_2.4.38-3+deb10u5_armhf.deb fc3d61ea011a19baf3fe7dcc15b35e6002762452 1149400 apache2-bin_2.4.38-3+deb10u5_armhf.deb 603266cd5913ce87aa38ab8f95181c4f48826715 331400 apache2-dev_2.4.38-3+deb10u5_armhf.deb 828b7ac0fa43324fbe0ad9bf53ad4cce591bd825 2344 apache2-ssl-dev_2.4.38-3+deb10u5_armhf.deb 7822aec9d1ade6a0c8d374bad3c42324d44fb19b 12680 apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_armhf.deb 3e23a0d3477cdb7752f53c0413cae78f91030b0b 170876 apache2-suexec-custom_2.4.38-3+deb10u5_armhf.deb de9e97226901b06697347fb0072737cbd76fad08 11560 apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_armhf.deb d11fabe43552e5e9ecf4116fb9e4c8d0027a51ed 169412 apache2-suexec-pristine_2.4.38-3+deb10u5_armhf.deb ffef2e35fc170f4677fc9b380e848944c5abe6d4 140596 apache2-utils-dbgsym_2.4.38-3+deb10u5_armhf.deb 63f73ea9433e58948b3f2894866893710369709f 236688 apache2-utils_2.4.38-3+deb10u5_armhf.deb 96971f98cb836c619c273820a87c9ef573dfc642 11127 apache2_2.4.38-3+deb10u5_armhf-buildd.buildinfo e00878953be6f55e47b516dde396bd2ea3104395 251656 apache2_2.4.38-3+deb10u5_armhf.deb ed42adb6c2626fff036949fba0568d90f66d5e50 948 libapache2-mod-md_2.4.38-3+deb10u5_armhf.deb 82f1322317d2d837a073fe934539d12d2091a8c2 1132 libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_armhf.deb Checksums-Sha256: e5597c2b5b073a0d722ef0b7703950e9fef13e1572b0b4d633680c72cb91ea69 4670408 apache2-bin-dbgsym_2.4.38-3+deb10u5_armhf.deb 4cde1016fdd37683253ea1f9590146c84ff6a54a3c151f61ccced7c51d17508c 1149400 apache2-bin_2.4.38-3+deb10u5_armhf.deb 1ff6ab57ac6c95cfe178805bcbdd8a631f9d56c5771816207079ffdef57a39f0 331400 apache2-dev_2.4.38-3+deb10u5_armhf.deb 775e439310d132b72a71842acc2ef550ba6aa9cf14bdc6e5a1c89b4b721312fa 2344 apache2-ssl-dev_2.4.38-3+deb10u5_armhf.deb 329e6e753ad1a3639973ccd74665e8a0395e3f46a69e18d827c05f310de318ed 12680 apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_armhf.deb 11090d1c4a28812049dc0660aadee2254d7c170e33fb13871eb911b5eaf3e41b 170876 apache2-suexec-custom_2.4.38-3+deb10u5_armhf.deb 9d4b51a4c1a7e710958a8b508cb1df50e8cc58c5c773235acf3d40224fd28371 11560 apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_armhf.deb 5311431781e57e4b893633fdb69049d947d79c4cc2b85958c7d463c138150c4a 169412 apache2-suexec-pristine_2.4.38-3+deb10u5_armhf.deb dc2a212d0b363939060c77d46079df37900a2913f991df3413ed9352e29c91d7 140596 apache2-utils-dbgsym_2.4.38-3+deb10u5_armhf.deb a05a1a34512acb3f282c42cb6c87a029057cdb146b0145e26346443d8237a0ee 236688 apache2-utils_2.4.38-3+deb10u5_armhf.deb 6f251ab63a8e77e1d89ac1c0835e16b7320b85e916a638c8eb5af5fe9c49729e 11127 apache2_2.4.38-3+deb10u5_armhf-buildd.buildinfo c69a42586269cb02e5be960b998b8c698e4dffe043844f581dff1dec932ae917 251656 apache2_2.4.38-3+deb10u5_armhf.deb 1f6896842c4ee52919939840b9d57e68f89ad1c092536f53efb86a44eb77bed4 948 libapache2-mod-md_2.4.38-3+deb10u5_armhf.deb 150caff6dfc0057dd02664c5ff2e72e7b74f5cf26a516b7f286938b7459d10b2 1132 libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_armhf.deb Files: 6ede9edf29f4e934b4035f70f6cbb7dc 4670408 debug optional apache2-bin-dbgsym_2.4.38-3+deb10u5_armhf.deb a46054fbd1d094e59583b5c7ba0c54f1 1149400 httpd optional apache2-bin_2.4.38-3+deb10u5_armhf.deb a5ce88e7fa85a39383a4dcb867596893 331400 httpd optional apache2-dev_2.4.38-3+deb10u5_armhf.deb e1e5991b8e19a9ff9cab79857239c37e 2344 httpd optional apache2-ssl-dev_2.4.38-3+deb10u5_armhf.deb 155b51525a6bbb9a429f5cdc1c71ede8 12680 debug optional apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_armhf.deb bf89ad2fc2d584733affb27f934b0ffa 170876 httpd optional apache2-suexec-custom_2.4.38-3+deb10u5_armhf.deb fe63b46d072f1be2bf9f3418f282760d 11560 debug optional apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_armhf.deb 15ff4719c2baac859923a63d186e6bb6 169412 httpd optional apache2-suexec-pristine_2.4.38-3+deb10u5_armhf.deb 3812fa0e40a6857e3c2a26644ba5d4c6 140596 debug optional apache2-utils-dbgsym_2.4.38-3+deb10u5_armhf.deb 848ae95e5ae4abf33875593fcae637aa 236688 httpd optional apache2-utils_2.4.38-3+deb10u5_armhf.deb 66c31d122f6206bc32d863c5d2fcad8c 11127 httpd optional apache2_2.4.38-3+deb10u5_armhf-buildd.buildinfo f0b4c24c5e0555f3353fa85cf2b25c81 251656 httpd optional apache2_2.4.38-3+deb10u5_armhf.deb 0ebb2a8ca4b809dd891f5a3d203e8c23 948 oldlibs optional libapache2-mod-md_2.4.38-3+deb10u5_armhf.deb 8fab662d762223c9da3fdd253d11346c 1132 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5SboDbFZ1ncj/9P+rhekVxncT3kFAmDmGzMACgkQrhekVxnc T3kYmQ/9FbURvTtv9VGugjXsKtpaiFV+u9YgfgREEKWUDDyyXE5/hDkABIdvG+V/ 2XZCuhDe/kzenNDevDXJai2EHISJqWlMglVqQN0RWdOGhn5gL9oY6/lymVIiSzuy 9H/y/X6BuJGKOwhoOjIoNBJsnHCHd55qfH4HXzAsrCXh2JIO4D8LT/ARByUC4gXr SsT1mJDtDUYV00Q8HguVN31c4Rmp53uAcbq4Hf0+Bzsfjk1ulDOWn3D83SZFr2Sh 6/KYtcdUKbb7cU5eJX+utPaURwrbo5V77Lu4eOXDx3759N6jYbxPktUDHtGnwz0I YXuHZ7ZyPcMpu5MrVYonF2PlAd3DwueE0JkVaUSbWnBSOmJ/dMyqcua/wB7LXVAg AVtJhypAbHqmO0Og+tI5u9+i6i7GQdrEu53Wa20+hpweb+eT1bkIElBfXJXu3by1 Kq81D4JVimWNam56v8WrB+fR7DumPcr32tKKk0nx/tTUdnc5NwxInwqkOOjqOD8H BSuTreVIuEY1FJrX0ZNzRETtxIiyjBYPm3NM2O/5jExok0nKZkQzIshGJDU4hBoG NpZe63Qxdb5CJEGo0bGUIqEbi9nrQbrrNIdlBZAMcNXuI5M+2SCvLsdwjepQKRpj 3NIzueCMYRRHeog61uiBtki+UR6f6TInPecbHz2fUrJhMmn+woQ= =TvJM -----END PGP SIGNATURE-----