-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 18 Nov 2014 15:18:18 +0100 Source: apache2 Binary: apache2 apache2-data apache2-bin apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-mpm-itk apache2.2-bin apache2.2-common libapache2-mod-proxy-html libapache2-mod-macro apache2-utils apache2-suexec apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-dbg Architecture: source amd64 all Version: 2.4.10-8 Distribution: unstable Urgency: medium Maintainer: Debian Apache Maintainers <debian-apache@lists.debian.org> Changed-By: Stefan Fritsch <sf@debian.org> Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dbg - Apache debugging symbols apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-mpm-event - transitional event MPM package for apache2 apache2-mpm-itk - transitional itk MPM package for apache2 apache2-mpm-prefork - transitional prefork MPM package for apache2 apache2-mpm-worker - transitional worker MPM package for apache2 apache2-suexec - transitional package for apache2-suexec-pristine apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) apache2.2-bin - Transitional package for apache2-bin apache2.2-common - Transitional package for apache2 libapache2-mod-macro - Transitional package for apache2-bin libapache2-mod-proxy-html - Transitional package for apache2-bin Closes: 754492 769821 Changes: apache2 (2.4.10-8) unstable; urgency=medium . * Bump dpkg Pre-Depends to version that supports relative symlinks in dpkg-maintscript-helper's symlink_to_dir. Closes: #769821 * mod_proxy_fcgi: Fix potential denial of service by malicious fcgi script. (CVE-2014-3583). Fix similar bug in mod_authnz_fcgi even though it does not seem to be exploitable. * mpm_event: Fix use-after-free that may lead to a server crash. * mod_ssl: Fix memory leak on graceful restart. Closes: #754492 * mod_ssl: Avoid crashes during startup or graceful restart due to openssl using a callback to invalid memory. LP: #1366174 Checksums-Sha1: 201d85659c842d939b605a79260d506f6ade3dcc 3218 apache2_2.4.10-8.dsc bed6f52f637c5fd46b1f74c977f8bfd759adf778 525612 apache2_2.4.10-8.debian.tar.xz c0aab08b541261643cb7142dafbd1a5f60c1f6e1 1150 libapache2-mod-proxy-html_2.4.10-8_amd64.deb 8343a0c53ca78395900625b30f61f20d5520983c 1138 libapache2-mod-macro_2.4.10-8_amd64.deb 201798dade3a41bde7ea7ee3a67d7adcd9a01016 203962 apache2_2.4.10-8_amd64.deb df15ea1b0c23c74dba7687059d1bb65f313a1d44 162398 apache2-data_2.4.10-8_all.deb 2d2600599e28df07067c7a0db29b9a6ffccc65c0 1030738 apache2-bin_2.4.10-8_amd64.deb c0587e3145322e220d904a6da8a24a87b3b67f2d 1508 apache2-mpm-worker_2.4.10-8_amd64.deb f12d89585db365323a8266173c40699ba292142d 1510 apache2-mpm-prefork_2.4.10-8_amd64.deb c121d26665a19e7e279d2b8c3f4065c71d9450e6 1508 apache2-mpm-event_2.4.10-8_amd64.deb 1b48487bef3630a6a4a1b9ceb34382c0401fce06 1504 apache2-mpm-itk_2.4.10-8_amd64.deb 831caf8cdc7f3e140f6e0e64b4dd641d1df1d18c 1696 apache2.2-bin_2.4.10-8_amd64.deb 6b0c33f13d727ef7f94748fb777fcd09e9af32fd 123464 apache2.2-common_2.4.10-8_amd64.deb d6d73cb0169c364904aaa97035b3df600383e758 193668 apache2-utils_2.4.10-8_amd64.deb f6004ef74693cba0068b72031377ff3d42ee56f6 1656 apache2-suexec_2.4.10-8_amd64.deb ab25ec561f8297502a7e0457133c439426bc49c5 128628 apache2-suexec-pristine_2.4.10-8_amd64.deb 9beac8deb10388697d9d7606f7b181ea53e0315d 130150 apache2-suexec-custom_2.4.10-8_amd64.deb 5362948495ab40b4994e4cc469b647a659aa9e0c 2725090 apache2-doc_2.4.10-8_all.deb a54085116cffeeb466d732f403bd185047af7d06 279702 apache2-dev_2.4.10-8_amd64.deb 91f818d3bac79cae2d1a5e0946652a92b56e65b7 1704298 apache2-dbg_2.4.10-8_amd64.deb Checksums-Sha256: db646683eecf0ffde6fb422eaa50ad85febea0ba6c812ee4c9e26d2c9f493b58 3218 apache2_2.4.10-8.dsc 5209ccdcce16df738d41753c23a5e3a554dacf91453836db9ee829529cca18a7 525612 apache2_2.4.10-8.debian.tar.xz 46183220bcf754fa561463a7bf8fa3c880ff77f06cb7a2eafe42e9800ee88479 1150 libapache2-mod-proxy-html_2.4.10-8_amd64.deb 619333fa07025cd9c4bf2f6f4be6e993fd290e59ec9a096606c853e7623fffb4 1138 libapache2-mod-macro_2.4.10-8_amd64.deb 85e2fd7c7cc957c5b9d5affe37d661b15e6424dc6491f45df58972fbff327d0e 203962 apache2_2.4.10-8_amd64.deb f053d4ab5ad6588ab5e64d6831f14ab887700d60c25248d02bef39311cb99058 162398 apache2-data_2.4.10-8_all.deb 8c429c69f2ea79e3c61981c03844b37f16021faeb0ba3c472e9d210ca0953cba 1030738 apache2-bin_2.4.10-8_amd64.deb 7938c22e786fe3c2a97a3cbb97ad3bcfb90b229d1acc3d0e40e409ba2c0ab423 1508 apache2-mpm-worker_2.4.10-8_amd64.deb 02c7c0674785443206c6f2c288026aac67d3379d82247651f6c0911600ba01d3 1510 apache2-mpm-prefork_2.4.10-8_amd64.deb a3e8e3f53df24d54e3b21abf45bd69183dfbbbf633690a529ef9dde9f38d5724 1508 apache2-mpm-event_2.4.10-8_amd64.deb cd766cee28a209db3852c086f6a9fded17a4f74929b5f747aad849179fb4d87a 1504 apache2-mpm-itk_2.4.10-8_amd64.deb 3f0c16d7af7a231c59452f992617db243c748cd7cc5d52ede12eb93118be9cec 1696 apache2.2-bin_2.4.10-8_amd64.deb aedf744484867ee2edc04f627d4962f09588fccfc98f09aad0e301d5339ee86a 123464 apache2.2-common_2.4.10-8_amd64.deb 1ccb383e77fd66261440a4bad3d78acf0d4bfe7657eb81ccb1567e7ae29c09c8 193668 apache2-utils_2.4.10-8_amd64.deb 3900347d4e3076ff03083966e7772fb5e50e716a7b2196435d5e77c012e3c989 1656 apache2-suexec_2.4.10-8_amd64.deb 2aa99d6a811c4f01526566d016ba14a93254249b8c95154ea3a1dfe8ecc06185 128628 apache2-suexec-pristine_2.4.10-8_amd64.deb 39f0ea5a462a844587cca036fb9bee7120339784abc88aff3ba913bbd76de50d 130150 apache2-suexec-custom_2.4.10-8_amd64.deb bbb82661df678990ddffccee4b6de467f1d6a1edc73ee3e135d4137c37fb5b4a 2725090 apache2-doc_2.4.10-8_all.deb e5bf41d5995fd8100aa05b58cb7033456b46158973d93210a78b99faa895debd 279702 apache2-dev_2.4.10-8_amd64.deb a6345d4db5e88fa37c72be49731298e86d45ffa93d44eeb620e8153c1cc4c928 1704298 apache2-dbg_2.4.10-8_amd64.deb Files: 6a812b14eef6a49cbdab672067a857de 3218 httpd optional apache2_2.4.10-8.dsc e7b80265d53ab36bcdaa305fd074b1d2 525612 httpd optional apache2_2.4.10-8.debian.tar.xz 482a74a1aba50d704906214b95ab9d79 1150 oldlibs extra libapache2-mod-proxy-html_2.4.10-8_amd64.deb a07c891b8e6de69786ca4a630a4e1fad 1138 oldlibs extra libapache2-mod-macro_2.4.10-8_amd64.deb 024404c13052a7358966dce42e289552 203962 httpd optional apache2_2.4.10-8_amd64.deb 7ff4eea3e09d847b534d5978b3484f92 162398 httpd optional apache2-data_2.4.10-8_all.deb 08942d36dc367f9ee007559008993da9 1030738 httpd optional apache2-bin_2.4.10-8_amd64.deb d1ec09e75e32f15420f7244ef301f858 1508 oldlibs extra apache2-mpm-worker_2.4.10-8_amd64.deb 40f3ade965293ec03473e5dd5d530bdf 1510 oldlibs extra apache2-mpm-prefork_2.4.10-8_amd64.deb a74fb1394a814a7db7295f39adb90d92 1508 oldlibs extra apache2-mpm-event_2.4.10-8_amd64.deb d83e075ff22c9c49d1da5923218087db 1504 oldlibs extra apache2-mpm-itk_2.4.10-8_amd64.deb 68072e9767e734d80012780c7fd7d1a9 1696 oldlibs extra apache2.2-bin_2.4.10-8_amd64.deb aa1b7751bc35b474f24fca5ea91921b8 123464 oldlibs extra apache2.2-common_2.4.10-8_amd64.deb c9eb2c45b2f590bebeff8fe7faf0a77f 193668 httpd optional apache2-utils_2.4.10-8_amd64.deb 195718fa709cd982fba8144637d347f9 1656 oldlibs extra apache2-suexec_2.4.10-8_amd64.deb 90e872dbbd0e486699c77ac93804b1c9 128628 httpd optional apache2-suexec-pristine_2.4.10-8_amd64.deb 8cb34f7bd1e9602b954bfa16119a2a92 130150 httpd extra apache2-suexec-custom_2.4.10-8_amd64.deb 24979a6ad6d49611fb90e331e0bdb161 2725090 doc optional apache2-doc_2.4.10-8_all.deb 13453dea2b1111d559835779044afe5b 279702 httpd optional apache2-dev_2.4.10-8_amd64.deb fbbda606d923babbf5ad6af1668191ab 1704298 debug extra apache2-dbg_2.4.10-8_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBVGtX+MaHXzVBzv3gAQhMVg//a1pH+A3T0LWhrp3Y1hGci78tukHgzITl 3M4438BFh/vD5tXZ3kQSqvt+M0MjJDu1Gu8cr8aj0YDXHkTA1Klf3VS062P7oxSC eYBEt9RTsHodUyiJ4iSz0Zu8aM4HcCP4JS33k/iGWtz4IA9wpgrJaP4/76uTtVt0 mAd3A8ugOK4ymCPUUxYkyHjAMngol+d259zbTupewo0JpRJdasZK02/j8qzjiRXx INRGF32fqwG4yapc37c789+b8j1O5XYAkNmc0yWQxtriVL9OGa3dHmihU6XrQEuE 4Jo2b3T46GkReDMDXhGuz6JRhLCyJy9bRaCDXlvqqGoDUdu+Iwb0mBXeC30GW9f/ MsWgwC79gT8dUb4w8Je1S/ymbmJ/H1J4U2nmpOkjzCb13yAdAnSBu6Snw8kpR0x0 heJOzUX0FV5oP93/FVSdEoAYX+RzILfyFFOx64SfE6N3RrhDlK2o2OhLK1ywN8PQ I5pudSXAcp58Xp2lrPycaO8ty8t81ZutvG2C3xV55/by+ZaXY4HP99xSA0kQ0m+P Fe+C+ZwHM2RFoAG/br2g4GaRy8YtJZIUboSo30lL+N6rOL086FSo5bTNGdatwlcV iq9tnS9JNXD2nEO/BT5p3vpQvzVLp0kky0sZI9u/L4kB3RjP2gpNFCL9U/OCMXCQ DmGOA35LC0Y= =q4wF -----END PGP SIGNATURE-----
