-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 10 Jun 2021 12:13:06 +0200 Source: apache2 Binary: apache2 apache2-bin apache2-bin-dbgsym apache2-dev apache2-ssl-dev apache2-suexec-custom apache2-suexec-custom-dbgsym apache2-suexec-pristine apache2-suexec-pristine-dbgsym apache2-utils apache2-utils-dbgsym libapache2-mod-md libapache2-mod-proxy-uwsgi Architecture: s390x Version: 2.4.38-3+deb10u5 Distribution: buster-security Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Yadd Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-dev - Apache HTTP Server (development headers) apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) libapache2-mod-md - transitional package libapache2-mod-proxy-uwsgi - transitional package Closes: 989562 Changes: apache2 (2.4.38-3+deb10u5) buster-security; urgency=medium . * Fix "NULL pointer dereference on specially crafted HTTP/2 request" (Closes: #989562, CVE-2021-31618) * Fix various low security issues (Closes: CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641) and fix related test Checksums-Sha1: bc31b87718ba06c4cea5cc5b08a8715371e895c4 4765544 apache2-bin-dbgsym_2.4.38-3+deb10u5_s390x.deb 9889a6d8021c82e5f083c1540ba734857386cf62 1194212 apache2-bin_2.4.38-3+deb10u5_s390x.deb 14728dd58ceab09ade9aec0ed39d0d7eb8f9c968 331384 apache2-dev_2.4.38-3+deb10u5_s390x.deb 45336642d8446287a72f6faa30f274e52284d925 2348 apache2-ssl-dev_2.4.38-3+deb10u5_s390x.deb aa749ddaa2bc21af696417ef537cc3e7de0ace4d 12796 apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_s390x.deb 33d715887b41573925510b94facca8d8f42a3f6c 171444 apache2-suexec-custom_2.4.38-3+deb10u5_s390x.deb 1e954ef299cdc8bd3671a9329f67d8717da3aceb 11560 apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_s390x.deb e0e3833c378b252739109cd1141ca8999b11f6eb 169920 apache2-suexec-pristine_2.4.38-3+deb10u5_s390x.deb b21ceec195ae91c530cee31025d4db75a36e8193 140752 apache2-utils-dbgsym_2.4.38-3+deb10u5_s390x.deb 98cef0a6ace5ad5e1ebd1e4a4f7a7ad86be0f693 235024 apache2-utils_2.4.38-3+deb10u5_s390x.deb 1ed6a9b6106c0395aa97c2997032ccca551a52ee 11161 apache2_2.4.38-3+deb10u5_s390x-buildd.buildinfo 43dd34da1ff9136815a6ca803f80c12c7e69c0b0 251656 apache2_2.4.38-3+deb10u5_s390x.deb 7d69a696028ffe5d24bf88752d99f54df970cf0c 948 libapache2-mod-md_2.4.38-3+deb10u5_s390x.deb 3f1c984d13498ebde0a87a02eb02ac76298f3466 1136 libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_s390x.deb Checksums-Sha256: b061e72a13f293d01d9d700408f93956e6db031f49af6246b5158dc6d1889b19 4765544 apache2-bin-dbgsym_2.4.38-3+deb10u5_s390x.deb 90a805f0afe078b44ad01e10e78156a42c6a886055372c60b9d17947408ec6e7 1194212 apache2-bin_2.4.38-3+deb10u5_s390x.deb 438d75e94966b845d015d29531ebab9672ab275ff883557dceab128ed285836f 331384 apache2-dev_2.4.38-3+deb10u5_s390x.deb 83141aab0891b5927363df0ca13c4d225ec73bb641ff258c20b03d5283577053 2348 apache2-ssl-dev_2.4.38-3+deb10u5_s390x.deb ea0d5866fb306a1b6194515f8320144e2d4d70e5ff7974b6103f264fdcf2c7a0 12796 apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_s390x.deb 88b5b451bb6cb83061803fdced1e3126654b227ed3e0fa14ff0c3b01aa86f8a2 171444 apache2-suexec-custom_2.4.38-3+deb10u5_s390x.deb 9646e7e45ac7621c20dea1e773eaf313acf9875b816a2d0b864d7f3e37a08559 11560 apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_s390x.deb fcfd159ddce82edf135b26d7307ffc894cdfaef171e6ff6d6157c629d006fb4c 169920 apache2-suexec-pristine_2.4.38-3+deb10u5_s390x.deb 3924dc88d598886f93d33bac0c83ae382a48b5fcc3dac0eaaa64089d4baeb4e4 140752 apache2-utils-dbgsym_2.4.38-3+deb10u5_s390x.deb 9625aa6482235347b2bd014e0c4e2ba5b628864491fc9ed6d419709d5bb89902 235024 apache2-utils_2.4.38-3+deb10u5_s390x.deb b011f9cc603a54db417896eb6b621b1b723dfd4e5aa75079850c511d2fe1728a 11161 apache2_2.4.38-3+deb10u5_s390x-buildd.buildinfo f87d0eb9f2869e546acdf7980c20d2295bdfc1289614ce1302f83deb89fbef59 251656 apache2_2.4.38-3+deb10u5_s390x.deb fd617a9896a5d14150508d2905c6bfa8ea0bf4119506f95bf748579d1ad00c32 948 libapache2-mod-md_2.4.38-3+deb10u5_s390x.deb ca0efbe9615d40169f21bc6bc036b6751731fde3bd906f7fc6ad90848fbb4d7d 1136 libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_s390x.deb Files: aa9008036db352812b06704a9f9ce2d0 4765544 debug optional apache2-bin-dbgsym_2.4.38-3+deb10u5_s390x.deb 3f88a9e107d473223b0a05ffb6aa785b 1194212 httpd optional apache2-bin_2.4.38-3+deb10u5_s390x.deb 8f19b489ec2b21bf8fa029535acf81e6 331384 httpd optional apache2-dev_2.4.38-3+deb10u5_s390x.deb 8e4ea1aa516731bcf51b0bc2535eedce 2348 httpd optional apache2-ssl-dev_2.4.38-3+deb10u5_s390x.deb abf0308301b0be0df6a72aab21b91703 12796 debug optional apache2-suexec-custom-dbgsym_2.4.38-3+deb10u5_s390x.deb 2e797bdc44256ca762877ec60721f243 171444 httpd optional apache2-suexec-custom_2.4.38-3+deb10u5_s390x.deb e8bd6db57c59735d94a863589be9016f 11560 debug optional apache2-suexec-pristine-dbgsym_2.4.38-3+deb10u5_s390x.deb e56a0e0c065eaac9f85efed8180116a4 169920 httpd optional apache2-suexec-pristine_2.4.38-3+deb10u5_s390x.deb a55ae91de62a07bac20263e3d007409c 140752 debug optional apache2-utils-dbgsym_2.4.38-3+deb10u5_s390x.deb e689188bfc347d8f3414ade6e84eeb8d 235024 httpd optional apache2-utils_2.4.38-3+deb10u5_s390x.deb a8867e5baf28b12b3cbd909a84bec161 11161 httpd optional apache2_2.4.38-3+deb10u5_s390x-buildd.buildinfo 878b2d04d248352cbc01a40327b02f16 251656 httpd optional apache2_2.4.38-3+deb10u5_s390x.deb 6f3509b34b229cfd368ddc672278c46a 948 oldlibs optional libapache2-mod-md_2.4.38-3+deb10u5_s390x.deb 5b6bc4cef7903f26e6a4fc8e49d248a9 1136 oldlibs optional libapache2-mod-proxy-uwsgi_2.4.38-3+deb10u5_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEojOFpcHXAua7nE2yC6cttUtB7SYFAmDmE+kACgkQC6cttUtB 7SYEnw/7B5lpeWLoN5kgtKy0voAXvK97BFrGfMUZFj8GIdsV5Nl7LX92LrL1hYQ9 J4FPUQNkxwEPhOHdM7UlcjE9/ul9DrEdsMqQnB/ApgdYNcnjLzdWEFwk6bsVx05+ 7nxBy6K+S87lvAliBdBW+HNzJ20L8DhhDz2a0yHUBo9g0qza4gJXrb2I2gTIHWR7 VHVr6YJgHrCdGcpZf9up1DsEiKNrfDRnqUNdXzMYONXv8M5n4bxV91PK4oD6CcVA yvbUXPs5Il3UHZqL9eMllaQq/Uf/BZOtaSO+wiVjuq4c61ne71IjivunuZX3RWcq L4ZxKoqhmyDF5S7wlOQG/xZK3c4u3vqucz/kM/9LhpD9T1F8LfRtLz+MdtUTzgQW wYdu1m5m/2IPYkpzP7p2D7O5Jydf1uStDwdkVZlo4U1BHpVWgZUILRno3LowMPJQ IN4S8htL7Ky/YuFfn9KcWjQqNgX/ixCpRVwJL9A3EdeO6/IRSnLGg0DretzUJcd3 PnULDIi8VQZP2dI58nvfABr0ssko8Wp1s2aUW0ZYJx1Eih7Q1tSFqqyQ7u+MfTrW NqH9UkzlodhQzF16lt7sF5WjpCsrCYt3xgTLo0QgS9R3r1wECwki9FHct5IuQmdO pR/IbORPICIr1Xnr1bnKs3qSaECwsV/jWjO3HMFxt+5FSq97oOI= =R88C -----END PGP SIGNATURE-----