-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 10 Jun 2021 12:13:06 +0200 Source: apache2 Binary: apache2 apache2-bin apache2-bin-dbgsym apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-custom-dbgsym apache2-suexec-pristine apache2-suexec-pristine-dbgsym apache2-utils apache2-utils-dbgsym libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: i386 Version: 2.4.38-3+deb10u5 Distribution: buster-security Urgency: medium Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Yadd Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Closes: 989562 Changes: apache2 (2.4.38-3+deb10u5) buster-security; urgency=medium . * Fix "NULL pointer dereference on specially crafted HTTP/2 request" (Closes: #989562, CVE-2021-31618) * Fix various low security issues (Closes: CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641) and fix related test Checksums-Sha1: 57b8e44490deec71bc472041dd73521a9d1cd6eb 4236964 apache2-bin-dbgsym_2.4.38-3+deb10u5_i386.deb 5f153b30b542eef09fcdf0164980a99722d801b1 1371936 apache2-bin_2.4.38-3+deb10u5_i386.deb 10d1b43b58baea15a8546d2c93114d177a29aedb 331384 apache2-dev_2.4.38-3+deb10u5_i386.deb 9e0422dd38ee89eace4f5cb7b03d798963f32dab 2348 apache2-ssl-dev_2.4.38-3+deb10u5_i386.deb 9f6547ff774912b08a6adba0086f2553177f2d9e 11776 apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_i386.deb 8288e7f6a9431a0d26b6c1b4f56aecdf770e9b17 171752 apache2-suexec-custom_2.4.38-3+deb10u5_i386.deb a581d92232b188cb7975f565836be8779ebac20b 10624 apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_i386.deb 80d52be68389943742b641edbb921b62756da224 170168 apache2-suexec-pristine_2.4.38-3+deb10u5_i386.deb 14a1b55a19f08b04251c20c567e724daaec40429 129860 apache2-utils-dbgsym_2.4.38-3+deb10u5_i386.deb 65822ed8b05be13e14047278ae3da56e884726ce 240788 apache2-utils_2.4.38-3+deb10u5_i386.deb 670fab62bdef677b70ec84fc4ce86d1fe1c23f83 11168 apache2_2.4.38-3+deb10u5_i386.buildinfo e1e97d44c8f929a207e1cc5431040018755a29d4 251656 apache2_2.4.38-3+deb10u5_i386.deb e7ff6ccac689adae5a6416e0c61813284dd9e9f3 948 libapache2-mod-md_2.4.38-3+deb10u5_i386.deb 48daa15c4b13db08c6b1df8ce4873627ad99cb2c 1136 libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_i386.deb Checksums-Sha256: 708e7a15af2940a9839b1d6f0591d5c2db41d6948a90a0087d7fcb05b3876040 4236964 apache2-bin-dbgsym_2.4.38-3+deb10u5_i386.deb e143ed4a6c5fab6b31c209837e2ae8b585ceb27f578f69e34f69f3909872ab65 1371936 apache2-bin_2.4.38-3+deb10u5_i386.deb 0a1949a76878522ce2dd80784ddc86869758f431b29ff77f727dcbab4ac7120d 331384 apache2-dev_2.4.38-3+deb10u5_i386.deb 853edbf6769eed90e40c2a039361e1cda2359a31cf8610a96f80ca34c6233653 2348 apache2-ssl-dev_2.4.38-3+deb10u5_i386.deb 9e2f0e881420099749ff817193543f669925d90fd3a9ff0fb9810e73199c6879 11776 apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_i386.deb 2b93711632f8b2e92147ed0ca3a75ba261466487cbc8eb2decc7d2864813c511 171752 apache2-suexec-custom_2.4.38-3+deb10u5_i386.deb d5dce139724aa1e9aad58a055ab8176c9c594098621e47d1b8c94fe12eda1499 10624 apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_i386.deb 8d36cf88a87222adb3c9b2717158e563408a2df605d09f8219136d2af5dd6ac3 170168 apache2-suexec-pristine_2.4.38-3+deb10u5_i386.deb bdd02ff37b38391843afed7f803fde3b6580403ebc811e1537e9d85cc665b46b 129860 apache2-utils-dbgsym_2.4.38-3+deb10u5_i386.deb f69eff3246cfac5a5a76f520b540a9336ec6d4f029b6683317447837d14965ec 240788 apache2-utils_2.4.38-3+deb10u5_i386.deb 27c9d528e044eaa31164551411c716e095886557d62460d05936758c720aa0cd 11168 apache2_2.4.38-3+deb10u5_i386.buildinfo 82aca5f5a8fb79435e169f68ae61a2616e2da5eea959f005a2b534d368462451 251656 apache2_2.4.38-3+deb10u5_i386.deb ea7542ad09864c45d6abef781f4734dfc521bb8c2c521612a8b4249e10e08d6b 948 libapache2-mod-md_2.4.38-3+deb10u5_i386.deb 25b7f88e2686a5c9a066000783066827354deb79ee37034dbd12b6e3b7ff8a1f 1136 libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_i386.deb Files: 3c1fc8057178b851369d3cdeb4ed6efb 4236964 debug optional apache2-bin-dbgsym_2.4.38-3+deb10u5_i386.deb d122a6324783e43a635fcffd677a77e2 1371936 httpd optional apache2-bin_2.4.38-3+deb10u5_i386.deb 8a7a819fda8c6aa2ca07a8d229c86954 331384 httpd optional apache2-dev_2.4.38-3+deb10u5_i386.deb 43db52bd43e3e2b831d498a676c364c6 2348 httpd optional apache2-ssl-dev_2.4.38-3+deb10u5_i386.deb 2d3078cf88023b68136a7aacfd0ca297 11776 debug optional apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_i386.deb d42c2e8f6f29ba67827fef2a9b830a40 171752 httpd optional apache2-suexec-custom_2.4.38-3+deb10u5_i386.deb c72839829ba6cb598ad81bfe448f8ca0 10624 debug optional apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_i386.deb e74b5dbc0bee225312a390a21fa15809 170168 httpd optional apache2-suexec-pristine_2.4.38-3+deb10u5_i386.deb 29ef17541bf7ba59e5984953534ff99b 129860 debug optional apache2-utils-dbgsym_2.4.38-3+deb10u5_i386.deb 5748ee009142d8f061d404960bceb6d1 240788 httpd optional apache2-utils_2.4.38-3+deb10u5_i386.deb 494379303a3cbf6d4e9f9b1af2590144 11168 httpd optional apache2_2.4.38-3+deb10u5_i386.buildinfo a0469bd3aca7182c9984b1192c840cbd 251656 httpd optional apache2_2.4.38-3+deb10u5_i386.deb b2265e2802065654795d283ab0dbd768 948 oldlibs optional libapache2-mod-md_2.4.38-3+deb10u5_i386.deb ccd115d324cfca919fa03d6d20adbcc0 1136 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEeShLnnjT5e2dm1q4H4Xht4aLclgFAmDmEzwACgkQH4Xht4aL clh36Q//WuCSzsbjXWm2mInAZ7IJr48ocmONFdI9XqAelTEarDr2mZcNYS9lbCeH enu+EiUr5YjHpEuHRtjhX1S1/QUVfwF7gAZJm8OCDdd/4zzKLY/ntgg3T0KS5T7t N7ns9pmyGg/xzdQ5/bxc0ej7OUoFlWQOsgY3k7SB6w0T7O1RLd2FsF1l4QLuaOAy vJulDh8pQ7HPbBpF+rtVun2RafXEGHEnYWFy8DnrziUfUB3DWQZEEVfuQBUXZToh PczI4uE1+LXHpxNc0auoQFFgwvXkmyyyIY/Jkl59XzFyXI6rlq80nEZoxjkPQVDa dY0dq4eW5LI6k5OqkFRhSqmeKXUHYeUeIefJxbpfB7pbx2oSA/txSvek8s6Snjg5 EoIf+y1a4dEpXJuGFQmYEXpK3ja/E8ax2BllsuWotkdGrP3tVrPcM6E/c3Osg4uA j5TqX6xXieVJug99klxUZhwucwBoXMESYINSFlNHEoG47vzFdvYmOPdW0BzBJgMC cwdYT8mfm5rNbFj0+JteLEAsjGznLpf3MvZvdNsE8djowYdH2n0jRuoyt9RKBXGt KORmQ3g/KBVM/avyhI6SUIGbuXjlhQ6f65H5964A77qBKrH7tE/kI+eWuLB+DeIN rurdc7MWIpveuaS4wNOWt5dz8QBFKHHtJkF6it/w+KZdEB1l2sw= =a+TX -----END PGP SIGNATURE-----