apache2 2.4.29-1ubuntu4.1 source package in Ubuntu
Changelog
apache2 (2.4.29-1ubuntu4.1) bionic-security; urgency=medium * SECURITY UPDATE: DoS via missing header with AuthLDAPCharsetConfig - debian/patches/CVE-2017-15710.patch: fix language long names detection as short name in modules/aaa/mod_authnz_ldap.c. - CVE-2017-15710 * SECURITY UPDATE: incorrect <FilesMatch> matching - debian/patches/CVE-2017-15715.patch: allow to configure global/default options for regexes, like caseless matching or extended format in include/ap_regex.h, server/core.c, server/util_pcre.c. - CVE-2017-15715 * SECURITY UPDATE: mod_session header manipulation - debian/patches/CVE-2018-1283.patch: strip Session header when SessionEnv is on in modules/session/mod_session.c. - CVE-2018-1283 * SECURITY UPDATE: DoS via specially-crafted request - debian/patches/CVE-2018-1301.patch: ensure that read lines are NUL terminated on any error, not only on buffer full in server/protocol.c. - CVE-2018-1301 * SECURITY UPDATE: mod_cache_socache DoS - debian/patches/CVE-2018-1303.patch: fix caching of empty headers up to carriage return in modules/cache/mod_cache_socache.c. - CVE-2018-1303 * SECURITY UPDATE: insecure nonce generation - debian/patches/CVE-2018-1312.patch: actually use the secret when generating nonces in modules/aaa/mod_auth_digest.c. - CVE-2018-1312 -- Marc Deslauriers <email address hidden> Wed, 25 Apr 2018 07:38:24 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Bionic
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- httpd
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
apache2_2.4.29.orig.tar.gz | 8.2 MiB | 948e4a11278a5954698b880b30f401b1e9ab743713ee2c7280a54dd4ddd87085 |
apache2_2.4.29-1ubuntu4.1.debian.tar.xz | 711.0 KiB | c8b33ecac257f7d4e603c43682ee8ff06f5deafef7df11f50ca6bb5be9f91d6c |
apache2_2.4.29-1ubuntu4.1.dsc | 3.0 KiB | c4eb9a37ff8df645ffd9a0b113b977dbd4cb5407e8c9dbd9fbb773e3dc7cffc4 |
Available diffs
Binary packages built by this source
- apache2: No summary available for apache2 in ubuntu cosmic.
No description available for apache2 in ubuntu cosmic.
- apache2-bin: No summary available for apache2-bin in ubuntu cosmic.
No description available for apache2-bin in ubuntu cosmic.
- apache2-data: No summary available for apache2-data in ubuntu cosmic.
No description available for apache2-data in ubuntu cosmic.
- apache2-dbg: No summary available for apache2-dbg in ubuntu cosmic.
No description available for apache2-dbg in ubuntu cosmic.
- apache2-dev: No summary available for apache2-dev in ubuntu cosmic.
No description available for apache2-dev in ubuntu cosmic.
- apache2-doc: Apache HTTP Server (on-site documentation)
The Apache HTTP Server Project's goal is to build a secure, efficient and
extensible HTTP server as standards-compliant open source software. The
result has long been the number one web server on the Internet.
.
This package provides the documentation for the Apache 2 HTTP server. The
documentation is shipped in HTML format and can be accessed from a local
running Apache HTTP server instance or by browsing the file system directly.
- apache2-ssl-dev: Apache HTTP Server (mod_ssl development headers)
The Apache HTTP Server Project's goal is to build a secure, efficient and
extensible HTTP server as standards-compliant open source software. The
result has long been the number one web server on the Internet.
.
This package provides the development header and the dependencies for
modules that interact with mod_ssl's internal openssl state.
- apache2-suexec-custom: Apache HTTP Server configurable suexec program for mod_suexec
Provides a customizable version of the suexec helper program for mod_suexec.
This is not the version from upstream, but can be configured with a
configuration file.
.
If you do not need non-standard document root or userdir settings, it is
recommended that you use the standard suexec helper program from the
apache2-suexec- pristine package instead.
- apache2-suexec-pristine: Apache HTTP Server standard suexec program for mod_suexec
Provides the standard suexec helper program for mod_suexec. This version is
compiled with document root /var/www and userdir suffix public_html. If you
need different settings, use the package apache2-suexec- custom.
- apache2-utils: No summary available for apache2-utils in ubuntu cosmic.
No description available for apache2-utils in ubuntu cosmic.