Accepted apache2 2.2.22-13+deb7u13 (source amd64 all) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 26 May 2018 08:23:08 -0400
Source: apache2
Binary: apache2.2-common apache2.2-bin apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-mpm-itk apache2-utils apache2-suexec apache2-suexec-custom apache2 apache2-doc apache2-prefork-dev apache2-threaded-dev apache2-dbg
Architecture: source amd64 all
Version: 2.2.22-13+deb7u13
Distribution: wheezy-security
Urgency: high
Maintainer: Debian Apache Maintainers <debian-apache@lists.debian.org>
Changed-By: Roberto C. Sanchez <roberto@debian.org>
Description:
apache2 - Apache HTTP Server metapackage
apache2-dbg - Apache debugging symbols
apache2-doc - Apache HTTP Server documentation
apache2-mpm-event - Apache HTTP Server - event driven model
apache2-mpm-itk - multiuser MPM for Apache 2.2
apache2-mpm-prefork - Apache HTTP Server - traditional non-threaded model
apache2-mpm-worker - Apache HTTP Server - high speed threaded model
apache2-prefork-dev - Apache development headers - non-threaded MPM
apache2-suexec - Standard suexec program for Apache 2 mod_suexec
apache2-suexec-custom - Configurable suexec program for Apache 2 mod_suexec
apache2-threaded-dev - Apache development headers - threaded MPM
apache2-utils - utility programs for webservers
apache2.2-bin - Apache HTTP Server common binary files
apache2.2-common - Apache HTTP Server common files
Changes:
apache2 (2.2.22-13+deb7u13) wheezy-security; urgency=high
.
* Non-maintainer upload by the LTS Security team.
* CVE-2017-15710: Potential denial of service in mod_authnz_ldap; if
configured with AuthLDAPCharsetConfig, could cause an out of bound write
if supplied with a crafted Accept-Language header
* CVE-2018-1301: a specially crafted request could have crashed the Apache
HTTP Server, due to an out of bound access after a size limit is reached
by reading the HTTP header
* CVE-2018-1312: when generating an HTTP Digest authentication challenge,
the nonce sent by mod_auth_digest to prevent replay attacks was not
correctly generated using a pseudo-random seed
Checksums-Sha1:
af51a26e93f6656630d7593a610cf0d2b6460649 2925 apache2_2.2.22-13+deb7u13.dsc
6e8ad0b9062b69070534f98d3d26eb931431cdc1 272743 apache2_2.2.22-13+deb7u13.debian.tar.gz
dae22c12f4ee5b96d560ed7b367ecf1136b54d28 294276 apache2.2-common_2.2.22-13+deb7u13_amd64.deb
c57d4e6be19783e1885e55bb5da1bbe0f069a480 798098 apache2.2-bin_2.2.22-13+deb7u13_amd64.deb
60fa14834b3e6514f53824c88d05d3213a199931 2236 apache2-mpm-worker_2.2.22-13+deb7u13_amd64.deb
5d6545355f2beab10e0215bee0df64320d37cb25 2340 apache2-mpm-prefork_2.2.22-13+deb7u13_amd64.deb
d2a9079b07f0ae4f8835a7b209f9c56f96c9bcd1 2292 apache2-mpm-event_2.2.22-13+deb7u13_amd64.deb
3c3822da4aaf0f5b332761f82a841ee888bfed01 2320 apache2-mpm-itk_2.2.22-13+deb7u13_amd64.deb
49bbbc8bfa4d5be2becbf1e7883836842cc94f3d 164876 apache2-utils_2.2.22-13+deb7u13_amd64.deb
abfe6ba2ec031c7d4b12c435775067608d668163 108362 apache2-suexec_2.2.22-13+deb7u13_amd64.deb
c181ab93ec1b298d36fe550c636344b09a0bdca9 109900 apache2-suexec-custom_2.2.22-13+deb7u13_amd64.deb
8509bef0e4ba62d6cdc889274e6ac811b7059430 1438 apache2_2.2.22-13+deb7u13_amd64.deb
759170d028cddba4cb198b54d8bdf3cfa0e8a325 1779578 apache2-doc_2.2.22-13+deb7u13_all.deb
6f897d6d7de224d9c62ee7a295a4dcc802718e63 115262 apache2-prefork-dev_2.2.22-13+deb7u13_amd64.deb
d2aa76193ced17ce1802cca3276697ac5dde390a 116160 apache2-threaded-dev_2.2.22-13+deb7u13_amd64.deb
6b23c04ebd292918bfac781a4b7fa2cd22da09a0 1739872 apache2-dbg_2.2.22-13+deb7u13_amd64.deb
Checksums-Sha256:
fd8da0239060e46e57c24e51b5259637d97bb40643467398dbc0782a98643eda 2925 apache2_2.2.22-13+deb7u13.dsc
7467c4580dd17c0a3e338fe5346d5dd1d9b9181f0ae19fa513f1bd35c839deed 272743 apache2_2.2.22-13+deb7u13.debian.tar.gz
ba05d57ea066ba19fa9a3b15ae09152a2fe4fe53acc870d117f7f374d856b9e4 294276 apache2.2-common_2.2.22-13+deb7u13_amd64.deb
5019238a684c0aa27d2bc4c8864fa4bc98a78593581ad74723719b1e2c5964da 798098 apache2.2-bin_2.2.22-13+deb7u13_amd64.deb
d09aeeb5614f82e32f017bdd5379c455c3eb791f9eca373e4f27475483bcf917 2236 apache2-mpm-worker_2.2.22-13+deb7u13_amd64.deb
8d034a2068b7edb435b57c59a24b46d9482edff43aef550245de4fc2b9b09625 2340 apache2-mpm-prefork_2.2.22-13+deb7u13_amd64.deb
897f0378e188075c1a974170316feb93e3b13f7916a1666096a0815362082560 2292 apache2-mpm-event_2.2.22-13+deb7u13_amd64.deb
c80b1392862c58a22e50514f8dc1a1872ece6e5e21994713520942feb317018f 2320 apache2-mpm-itk_2.2.22-13+deb7u13_amd64.deb
713e559ce9e5ec83a7773257d04def84d565e9fcb3c21b69c6ef99a9373ab3e9 164876 apache2-utils_2.2.22-13+deb7u13_amd64.deb
0ec24094fe0fe9362299b10678ac8b676164d6b41cbda6bd203a422456d2f5c8 108362 apache2-suexec_2.2.22-13+deb7u13_amd64.deb
3e58a622a8268e67f19432a9f7205d65ce25e0f6985fedcb5827e3b2408be6c6 109900 apache2-suexec-custom_2.2.22-13+deb7u13_amd64.deb
ce7dbb9b09f2299440aef0f273a66ce4db4142da0471f4c90e6fae2e96575ec1 1438 apache2_2.2.22-13+deb7u13_amd64.deb
b02762ae3b956a8942b53177e9a90d52b38c985c3db66f77cacc7b746f90f49f 1779578 apache2-doc_2.2.22-13+deb7u13_all.deb
04bbc741ca32c7b11e6a0adcab5b93e110b7c2af129958fe52ab6607498a5c9c 115262 apache2-prefork-dev_2.2.22-13+deb7u13_amd64.deb
90f31fc7692000974d66319ec21185bddc380f46870ad25ee26fdc79e328ace0 116160 apache2-threaded-dev_2.2.22-13+deb7u13_amd64.deb
b9eeb45be2069de86b66caf7695fce53bf0437f4a4e17d7102d68e58f7ae1ff8 1739872 apache2-dbg_2.2.22-13+deb7u13_amd64.deb
Files:
b33e14f81d93804e60f2091c2010fc57 2925 httpd optional apache2_2.2.22-13+deb7u13.dsc
782dad1c541eef9f30a325934b62e361 272743 httpd optional apache2_2.2.22-13+deb7u13.debian.tar.gz
f51c6b3f719b4f9d0bd8e692033b1637 294276 httpd optional apache2.2-common_2.2.22-13+deb7u13_amd64.deb
61b57b18215346833e91ab0090371488 798098 httpd optional apache2.2-bin_2.2.22-13+deb7u13_amd64.deb
51aca65d332693ee270fc18d1f138d08 2236 httpd optional apache2-mpm-worker_2.2.22-13+deb7u13_amd64.deb
e733cf038660d75b52bc55f0b9486f51 2340 httpd optional apache2-mpm-prefork_2.2.22-13+deb7u13_amd64.deb
372e3c50d37d56571e4bd79994a8e0b9 2292 httpd optional apache2-mpm-event_2.2.22-13+deb7u13_amd64.deb
dbee588c94667a1a9e8f87a06f2ce05d 2320 httpd extra apache2-mpm-itk_2.2.22-13+deb7u13_amd64.deb
b1c247fdb756e734b49f3d9239f1e23f 164876 httpd optional apache2-utils_2.2.22-13+deb7u13_amd64.deb
21930b3fe52df0e150cb56eff4dc179e 108362 httpd optional apache2-suexec_2.2.22-13+deb7u13_amd64.deb
1fa7edec29dc581b48e6a0bb212843ce 109900 httpd extra apache2-suexec-custom_2.2.22-13+deb7u13_amd64.deb
3d4eadbea0d3efe460eecf4fd1820190 1438 httpd optional apache2_2.2.22-13+deb7u13_amd64.deb
22bbea8481edff426fa8e3e8fda81666 1779578 doc optional apache2-doc_2.2.22-13+deb7u13_all.deb
cbff5254803bcef3b8c3014dc91a8b0c 115262 httpd extra apache2-prefork-dev_2.2.22-13+deb7u13_amd64.deb
8f2c0735504786b796e9511b49fc3c27 116160 httpd extra apache2-threaded-dev_2.2.22-13+deb7u13_amd64.deb
cc48312f632bfa277d24850b9b2b5725 1739872 debug extra apache2-dbg_2.2.22-13+deb7u13_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEz9ERzDttUsU/BH8iLNd4Xt2nsg8FAlsOlygACgkQLNd4Xt2n
sg+S2g//b3T30kCy7oJayU++P4mzv46itflFiiODyy2KxOeo3Mrcf2TUI/mC2jOz
JFnlCOOg1QBmsIdyDDK37M3xGNuQOeQeOzbx6NvROjSryTKfnGFDY1p6+w72qz2P
dmOGpoKfklL3ZeK8WMMjjGOeBmQNqhAURuR+i55Y/KiSNnjm50SSYvlmB1d4ZEXF
EOHrc4E7Ec8wNOlORyuPWML3gz2hIfOiOzC4IDfagx75gPj3EhNhwBWrV0073tDU
wwavdpkT7CGZ7nqKfr+2lVqNG2/Dh0LjqJoqwoVCNQXsCF+RDDrYtpzN8b/VjS1k
+/W2opF2BNNOJ6Y9H7BWLBxj0KQHZcZcunNxaNMSNrlrgweOXD18z11LS4OE+Jqw
kgbJrZReLtnQJlbp5bT26P5f8UYXU3Vt0KYToL8p+RFjwuJED/e8xPGHSee+GnMA
sY7kmkWNwhwPUzZKzjCgVKCl827T9DibJzBXe2y+sZxwPGSoFTnu/IAGchRKA3v1
lr22RhiUZlFmo+a/44JFZ4LBSCfNSVgYhmFviGA/z6QhoqZz6G/UwbA5DVJlMNLx
ErS5A3noGmnZjyfn+sf7KQhYoVqEyU3kgQr5BW4FBPvVPqKfBgVyQQJr2Q7SzaBs
nc2kpLNZf77UYs2TOsXV4YO732vV339sTngS0Axp16C6hZ8UzFo=
=tA1n
-----END PGP SIGNATURE-----