-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 10 Jun 2021 12:13:06 +0200 Source: apache2 Binary: apache2 apache2-bin apache2-bin-dbgsym apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-custom-dbgsym apache2-suexec-pristine apache2-suexec-pristine-dbgsym apache2-utils apache2-utils-dbgsym libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: mips64el Version: 2.4.38-3+deb10u5 Distribution: buster-security Urgency: medium Maintainer: mipsel Build Daemon (mipsel-manda-04) Changed-By: Yadd Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Closes: 989562 Changes: apache2 (2.4.38-3+deb10u5) buster-security; urgency=medium . * Fix "NULL pointer dereference on specially crafted HTTP/2 request" (Closes: #989562, CVE-2021-31618) * Fix various low security issues (Closes: CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641) and fix related test Checksums-Sha1: df497cd7c56eca458d8572ef3b6663a458714ceb 4911612 apache2-bin-dbgsym_2.4.38-3+deb10u5_mips64el.deb d36aecf85b8379b5a936176b27e5f84ce94d606c 1153688 apache2-bin_2.4.38-3+deb10u5_mips64el.deb 3dbd28b5f391eaaa1e79219821d470ac24c6fbc0 331384 apache2-dev_2.4.38-3+deb10u5_mips64el.deb 5c0deb7246d3fcd5ae56272f04dbc33a70a08e5e 2352 apache2-ssl-dev_2.4.38-3+deb10u5_mips64el.deb 04c80d9d032d81f3923ddd637212ade815245cae 13420 apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_mips64el.deb 09cb463aeae4e44f67cccb3ae3d05f73b9e16e5b 171504 apache2-suexec-custom_2.4.38-3+deb10u5_mips64el.deb 97a0abd0afc330105ede100914236dd1082870d8 12200 apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_mips64el.deb 811f325ae2fe868a9a3c37a1ebe2e48042051f0e 169988 apache2-suexec-pristine_2.4.38-3+deb10u5_mips64el.deb b2b3384505f3b4558502461cd9ee48950f57a187 146840 apache2-utils-dbgsym_2.4.38-3+deb10u5_mips64el.deb 0c029fc608df1ee91c49ec6f2fe6d69f34f7a746 236340 apache2-utils_2.4.38-3+deb10u5_mips64el.deb 72d87cdf8074760a958ecd717d72f0adb9259d30 11207 apache2_2.4.38-3+deb10u5_mips64el-buildd.buildinfo 83abeae9c4f99131d4438b9ffd1bfc50f7cc6cc4 251656 apache2_2.4.38-3+deb10u5_mips64el.deb 97fc1438abb3bc41838a039422a873010146af7e 952 libapache2-mod-md_2.4.38-3+deb10u5_mips64el.deb 86db4aa31ac76e42494afff8a307f79b30f6cb7e 1136 libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_mips64el.deb Checksums-Sha256: 2a89f23974203de23a601f0ca0b1e4472eb34c26a80fca6598f1ccb86a7ee50b 4911612 apache2-bin-dbgsym_2.4.38-3+deb10u5_mips64el.deb 556dda83d2c893590ce8ac084324b17bb3adc5100c3c2032012c09c3d6cb4a27 1153688 apache2-bin_2.4.38-3+deb10u5_mips64el.deb 459877aaf9a0139ffc9796e5b630f3e17a9eaa6aba6c223bc70616f2b9e758a2 331384 apache2-dev_2.4.38-3+deb10u5_mips64el.deb 7723d0151bc3cab25ee3e484e3b987fe0dc42c4e4225ea4c6c5f80a4aac8dbe9 2352 apache2-ssl-dev_2.4.38-3+deb10u5_mips64el.deb bfeef661b4e8e52a45a371d6cb6772621eb7a91d65cffe8f6d8d0e467d32dfcd 13420 apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_mips64el.deb 1cca8b1499075e63dd34c7fe0a2cb28e7e58620ca62dcf987bc6c9ab62db593d 171504 apache2-suexec-custom_2.4.38-3+deb10u5_mips64el.deb 0d89e883bbebbcfe06b903230ce4be6d56203bd488091ed6ed659b0df8206f8b 12200 apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_mips64el.deb d582cbd42fb836dc7b5c1fec777f04cc6d1e662ffd845ffa7d5aaf9ccb2875ce 169988 apache2-suexec-pristine_2.4.38-3+deb10u5_mips64el.deb a95c93a10d74ae0c2cfc8fc0467bf9bd14f94362dc954ab317f2e9dd8c908600 146840 apache2-utils-dbgsym_2.4.38-3+deb10u5_mips64el.deb 98912815ae4f26206e7e18ce8699be06b5cd23dff0b137428d2f2b0a37f682d0 236340 apache2-utils_2.4.38-3+deb10u5_mips64el.deb 0342470a19223eb5e3930dbda4fe43d2445eb7570cf5fab470de11e0d173efe0 11207 apache2_2.4.38-3+deb10u5_mips64el-buildd.buildinfo 498dc67060525b2949c502dd3eb66dea567650d823f87107d0c034ac7c1a51ae 251656 apache2_2.4.38-3+deb10u5_mips64el.deb 3de88fe1cd10beb8c3d62bcf63ed67aee80d6c61f0bc0db5c27352d9b7299342 952 libapache2-mod-md_2.4.38-3+deb10u5_mips64el.deb dffc0d8b18efeb7b4cad3bc9f8aef79975bfec0486bacc1f740034e898bc590b 1136 libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_mips64el.deb Files: 4426b9ba62a16a03c16e9fa3c7190081 4911612 debug optional apache2-bin-dbgsym_2.4.38-3+deb10u5_mips64el.deb f6fb66cb52c2192f4f9c9a5cd609fa27 1153688 httpd optional apache2-bin_2.4.38-3+deb10u5_mips64el.deb b9fab330680f0978c79b56e325667c35 331384 httpd optional apache2-dev_2.4.38-3+deb10u5_mips64el.deb 9eeb166ec89640f3b1d187d150552914 2352 httpd optional apache2-ssl-dev_2.4.38-3+deb10u5_mips64el.deb 98b9c39264584e6d0576399213d3422d 13420 debug optional apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_mips64el.deb 5f73875f78826d59dc022a8762e22519 171504 httpd optional apache2-suexec-custom_2.4.38-3+deb10u5_mips64el.deb 31fbd669a60d571d204f6fe87a7c4ae3 12200 debug optional apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_mips64el.deb a457c7dd9fedca9932499173c546ff4b 169988 httpd optional apache2-suexec-pristine_2.4.38-3+deb10u5_mips64el.deb 3f8704182a7be1eb0228a59e8d5b73d0 146840 debug optional apache2-utils-dbgsym_2.4.38-3+deb10u5_mips64el.deb 7eab30e53a99ec4f83d0ee5e8fc3064e 236340 httpd optional apache2-utils_2.4.38-3+deb10u5_mips64el.deb a48b5ced3aeaecea79bfd2e1c6415253 11207 httpd optional apache2_2.4.38-3+deb10u5_mips64el-buildd.buildinfo 2455243e84edd34d24cd15177843c2bb 251656 httpd optional apache2_2.4.38-3+deb10u5_mips64el.deb b7f9084aa0cad82bc89028659b8fbb8e 952 oldlibs optional libapache2-mod-md_2.4.38-3+deb10u5_mips64el.deb 856caa39778d69725f68ec5b9dc57db4 1136 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3ScFd/C5XooG8cTOSlWhEcfpBVMFAmDmFWMACgkQSlWhEcfp BVP1shAApaQiTqCKBrGaptGMMJygYXrHDyCN9em05FThUFKMtIs1O0ZS1wfON6JN wWhOHZoJ4XZE6a/2MNjxCMLn3aRSb9KDpMPJPpAXTQuy943/wMsq4kx/EU6h/ekd DPab7etF6TrG7HhSw7Km09wV0pW5s58f1ymXfbfsx75x8uyikXXgkmCg+mo50hcG Ct7+ktTmkXV2BdlnnhioY1MJgpDrggqJkDkJBhQReiDJhO0V5PPA7PS/wgu0c/rD ecXhf7XYBTEibgRD0zJIC5qilmkUByafTbblvLKIQOVY+TyuI7PsLZtYkBKSSk0A jvFf4QQ5S3bSfiEGP3sWk0YmjYYNfs3BGXKenuDu3e23w0nOGA+U+Aqwf6Q4m059 wrvrr2V558hNTMJE2NasPOUE3PijiRwMYHR3NsfcID4XtNgvV8QL+1Yghxb5n8Rd yHkoeq5j/ot4lSNX8OV0qzFeFO4AdPZRu5sUo2IbeoOUZ+yRsAtdLmORBr9hp3sQ DqtOU4XS7YjICcvVZYq6y5NlM2gpHZLDNy8ATjzE87cQSTfqGuIMlKou7+dQImwD 5zJIDrbZIpv/BFShTz+ce0+pTDO2a/1/8HG/74jVPaUSGvnaeGxNvmLCCsnQKB5m Ji2rKwJ7R5/PP6BBeKSypCkAR1XfqfEvd8j60FdZdQrgH7Z2qV8= =ql2B -----END PGP SIGNATURE-----