-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 02 Aug 2015 00:44:07 +0200 Source: apache2 Binary: apache2 apache2-data apache2-bin apache2-utils apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-dbg Architecture: source amd64 all Version: 2.4.16-1 Distribution: unstable Urgency: medium Maintainer: Debian Apache Maintainers <debian-apache@lists.debian.org> Changed-By: Stefan Fritsch <sf@debian.org> Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dbg - Apache debugging symbols apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) Closes: 733979 787103 789788 789914 Changes: apache2 (2.4.16-1) unstable; urgency=medium . [ Stefan Fritsch ] * New upstream version, fixing the following security issues: + CVE-2015-3183: Fix chunk header parsing defect. + CVE-2015-3185: ap_some_auth_required() broken in apache 2.4 in an unfixable way. Add a new replacement API ap_some_authn_required() and ap_force_authn hook. . [ Jean-Michel Vourgère ] * Allow "triggers-awaited" and "triggers-pending" states in addition to "installed" when determining whether to defer actions or process deferred actions. Thanks Colin Watson. Closes: #787103 * Allow a2dismod cgi on threaded mpms. Thanks Raul Dias. Closes: #733979 * Remove pre-Jessie transition scripts, and remaining breaks. * Made builds reproducible: d/rules set the date from the changelog in CPPFLAGS, new reproducible_builds.diff patch to use it. * Moved bash_completion from /etc to /usr/share/bash_completion. Added links there for dynamic loading. * Upgrade security.conf comments to 2.4 auth format. Thanks Werner Detter. Closes: #789788 * apache2.postinst: Fixed tests on deferred mpm switch. Closes: #789914 Checksums-Sha1: fb5065924934ca6c1300f773ee15533c18d5ba44 2627 apache2_2.4.16-1.dsc 9963e7482700dd50c53e47abfe2d1c5068875a9c 5101005 apache2_2.4.16.orig.tar.bz2 f04d64607fa67f2b90be714c0fee896f1d0bf788 437292 apache2_2.4.16-1.debian.tar.xz a9dbe517968a6303c6eb65eb2be58fce83704a8b 1044070 apache2-bin_2.4.16-1_amd64.deb c45bf50cf722d41854608e3d214f84ac7192c900 162908 apache2-data_2.4.16-1_all.deb 71456db11a8eec602e2c5c795de7f8a214c3c575 2010854 apache2-dbg_2.4.16-1_amd64.deb 5ef360138a05fbde4ef41571fd53e7f42cbbd37e 288948 apache2-dev_2.4.16-1_amd64.deb 28643d3639abbbb523996c1bd8499de77e4cb191 2756076 apache2-doc_2.4.16-1_all.deb 4ff42ae633069fc6a57228f4a5c949955ae73de9 137776 apache2-suexec-custom_2.4.16-1_amd64.deb 1ccdb2cc27079637f960050946505499d15b0ec5 136316 apache2-suexec-pristine_2.4.16-1_amd64.deb 94ddeeb4f3d8c9b75f283ee8dc8096c08afd4b49 202066 apache2-utils_2.4.16-1_amd64.deb 6be6d194d5800ce64e93d5b0a61341b5a8b981a3 206708 apache2_2.4.16-1_amd64.deb Checksums-Sha256: effb5633da2b6f3b976b1c371465528a0ecc3318e3f6aae011dae76939f6b3d2 2627 apache2_2.4.16-1.dsc ac660b47aaa7887779a6430404dcb40c0b04f90ea69e7bd49a40552e9ff13743 5101005 apache2_2.4.16.orig.tar.bz2 0053ccf0847b26cecdc335ae1d54a03484b5388ab230783f6e4a53f7be4288fa 437292 apache2_2.4.16-1.debian.tar.xz 4143ec67229518426e46b4bef708ff0c8242531fd453f1fbac480338e3c5c2a9 1044070 apache2-bin_2.4.16-1_amd64.deb a94367c59ca9634ee95a9b4f6004c3fc67cefd3dcdc96154ba70f8b3c6eb7e0b 162908 apache2-data_2.4.16-1_all.deb 3e548af2c4714419badd45feb4a0a1d33156a59ac5f4db4d33632fec2536f72e 2010854 apache2-dbg_2.4.16-1_amd64.deb 9b442c53f47cf35817da72a94b163bb8074f1ed863c904ee7b9a63f42d35b1f8 288948 apache2-dev_2.4.16-1_amd64.deb d96da210b1590326d3eb2270349d8efa5b569f21f3cdcbad7cbdb8a500e83587 2756076 apache2-doc_2.4.16-1_all.deb ac54644378d4080a7320fa2332563a63d7ff7789128775bbc7bb2e2b7d39fa49 137776 apache2-suexec-custom_2.4.16-1_amd64.deb 64af08d49a6d11f2d7193e81135886bb98189e87e27d057d4bb706509ef86b46 136316 apache2-suexec-pristine_2.4.16-1_amd64.deb 0f27bb8ab7500c3489594ce0f14217427607b696cb9786dc0165fd79371f448f 202066 apache2-utils_2.4.16-1_amd64.deb 64b8acb9289011fa3892ac1dedacfb1feeb90a84187636f190e7a1ee856c32ae 206708 apache2_2.4.16-1_amd64.deb Files: b87020bdf4a48e6bf6c4d850c1d4b42d 2627 httpd optional apache2_2.4.16-1.dsc 2b19cd338fd526dd5a63c57b1e9bfee2 5101005 httpd optional apache2_2.4.16.orig.tar.bz2 9b4e058d21dc72d8511141fb068b9651 437292 httpd optional apache2_2.4.16-1.debian.tar.xz 2f3b71e9ce7f12f1f9f38a57e8c092f1 1044070 httpd optional apache2-bin_2.4.16-1_amd64.deb 6985626bc5ad254b0f35e6cf8b33ac31 162908 httpd optional apache2-data_2.4.16-1_all.deb e68a50c99a78c0edf4f4e67590a78020 2010854 debug extra apache2-dbg_2.4.16-1_amd64.deb 10eec8232372acd906f1224b203cbf52 288948 httpd optional apache2-dev_2.4.16-1_amd64.deb 86d378ba2bf96971395b99428e93b073 2756076 doc optional apache2-doc_2.4.16-1_all.deb 960c71212ff4d4469261aad2bd5b3e6d 137776 httpd extra apache2-suexec-custom_2.4.16-1_amd64.deb ab023abbcb06087ecae71ed8181d329b 136316 httpd optional apache2-suexec-pristine_2.4.16-1_amd64.deb e678108ee3a1d2c39835384ea822f799 202066 httpd optional apache2-utils_2.4.16-1_amd64.deb b1662a16c5c956e4163cf84e2cc662ea 206708 httpd optional apache2_2.4.16-1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBVb1MxsaHXzVBzv3gAQieBRAAlUA9VBi0BBLLMczOcO8onuC4fBV2L+gj i1FgYablmTD8T576wTfOvn7wW6faJTUJ+YrsdWUfVdXWki0kLKiDphTK9YWtw/uw /uglXfS0G9SOT2APc2DiMKRLmfH09sGboP0yOScqQoHn07ttUhR0w/7CbbhLRfqY IALlPvDE8LJxXB3KZsFZy/YVH8quWPt/607e1plDGqM0/qdc8eWX4s0+6aQSXiJ9 ZDZS053RdH+ZJzxfPTmEt7lVYpNCSFNzSCMmd1jey5gWhCR7zsN/Tc0REStS/A0C hzybJJBNgtGueXIrZGwQ5C2Bzk/rSNN4UhMp/SwOwd0SaQew/fm3NfJ6gRkKlhsQ iE05KtOOETFBA2POuxuo8llH4xoo1N36vj+nWz1lLruXFzzyZva3h/I0CVrra+kX zqYLum0b5Qea/9WZ+/lwM2csvDGENX8ALibqIDYDICTAJqJ70W4ao2loez0MgzOM bbzIsFH8wY6FOnyOnBnzQ/esCQU5TrTDTSB4F8Rg/O6ei+60VTyqQp+7ODuxD0pR yvv7rVhjkQDH+fWWSLowqEXxqLhO+cvN+GyWy06MQaFZVyCbn2B74SLA4gR3x3d2 4sgIoqZ7w/rAkR9WXVMZ6bDjMGWaKysOSfstDgGriX7JDERL5Kbim7GsG0J4CAdG uMy7aZo3X3c= =hLFT -----END PGP SIGNATURE-----
