Ubuntu
apache2 package

apache2 2.4.48-3.1ubuntu3.2 source package in Ubuntu

Changelog

apache2 (2.4.48-3.1ubuntu3.2) impish-security; urgency=medium

  * SECURITY UPDATE: DoS or SSRF via forward proxy
    - debian/patches/CVE-2021-44224-1.patch: enforce that fully qualified
      uri-paths not to be forward-proxied have an http(s) scheme, and that
      the ones to be forward proxied have a hostname in
      include/http_protocol.h, modules/http/http_request.c,
      modules/http2/h2_request.c, modules/proxy/mod_proxy.c,
      modules/proxy/proxy_util.c, server/protocol.c.
    - debian/patches/CVE-2021-44224-2.patch: don't prevent forwarding URIs
      w/ no hostname in modules/proxy/mod_proxy.c,
      modules/proxy/proxy_util.c.
    - CVE-2021-44224
  * SECURITY UPDATE: overflow in mod_lua multipart parser
    - debian/patches/CVE-2021-44790.patch: improve error handling in
      modules/lua/lua_request.c.
    - CVE-2021-44790

 -- Marc Deslauriers <email address hidden>  Wed, 05 Jan 2022 09:29:15 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Impish
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
httpd
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
apache2_2.4.48.orig.tar.gz 9.0 MiB 315c0bc50206b866fb17c2cdc28c1973765a8d59ca168b80286e8cb077d0510e
apache2_2.4.48-3.1ubuntu3.2.debian.tar.xz 893.4 KiB ccf2609b3869868ae3c757efaae9df3fb54a7e551a32c8ee1066aeb0f5f53bd4
apache2_2.4.48-3.1ubuntu3.2.dsc 3.3 KiB 05273479b86acae23c7edb126d4837d270cbe81f3eb0dd6c569ef94a157cc29b

View changes file

Binary packages built by this source

apache2: No summary available for apache2 in ubuntu impish.

No description available for apache2 in ubuntu impish.

apache2-bin: No summary available for apache2-bin in ubuntu impish.

No description available for apache2-bin in ubuntu impish.

apache2-bin-dbgsym: No summary available for apache2-bin-dbgsym in ubuntu impish.

No description available for apache2-bin-dbgsym in ubuntu impish.

apache2-data: No summary available for apache2-data in ubuntu impish.

No description available for apache2-data in ubuntu impish.

apache2-dev: No summary available for apache2-dev in ubuntu impish.

No description available for apache2-dev in ubuntu impish.

apache2-doc: No summary available for apache2-doc in ubuntu impish.

No description available for apache2-doc in ubuntu impish.

apache2-ssl-dev: No summary available for apache2-ssl-dev in ubuntu impish.

No description available for apache2-ssl-dev in ubuntu impish.

apache2-suexec-custom: No summary available for apache2-suexec-custom in ubuntu impish.

No description available for apache2-suexec-custom in ubuntu impish.

apache2-suexec-custom-dbgsym: No summary available for apache2-suexec-custom-dbgsym in ubuntu impish.

No description available for apache2-suexec-custom-dbgsym in ubuntu impish.

apache2-suexec-pristine: No summary available for apache2-suexec-pristine in ubuntu impish.

No description available for apache2-suexec-pristine in ubuntu impish.

apache2-suexec-pristine-dbgsym: No summary available for apache2-suexec-pristine-dbgsym in ubuntu impish.

No description available for apache2-suexec-pristine-dbgsym in ubuntu impish.

apache2-utils: No summary available for apache2-utils in ubuntu impish.

No description available for apache2-utils in ubuntu impish.

apache2-utils-dbgsym: No summary available for apache2-utils-dbgsym in ubuntu impish.

No description available for apache2-utils-dbgsym in ubuntu impish.

libapache2-mod-md: No summary available for libapache2-mod-md in ubuntu impish.

No description available for libapache2-mod-md in ubuntu impish.

libapache2-mod-proxy-uwsgi: No summary available for libapache2-mod-proxy-uwsgi in ubuntu impish.

No description available for libapache2-mod-proxy-uwsgi in ubuntu impish.