[ubuntu/impish-proposed] apache2 2.4.48-3.1ubuntu3 (Accepted)

[Marc Deslauriers]

apache2 (2.4.48-3.1ubuntu3) impish; urgency=medium

  * SECURITY REGRESSION: Issues in UDS URIs (LP: #1945311)
    - debian/patches/CVE-2021-40438-2.patch: Fix UDS unix: scheme for P
      rules in modules/mappers/mod_rewrite.c.
    - debian/patches/CVE-2021-40438-3.patch: Handle UDS URIs with empty
      hostname in modules/mappers/mod_rewrite.c,
      modules/proxy/proxy_util.c.

Date: Tue, 28 Sep 2021 08:52:26 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/apache2/2.4.48-3.1ubuntu3
-------------- next part --------------
Format: 1.8
Date: Tue, 28 Sep 2021 08:52:26 -0400
Source: apache2
Built-For-Profiles: noudeb
Architecture: source
Version: 2.4.48-3.1ubuntu3
Distribution: impish
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Launchpad-Bugs-Fixed: 1945311
Changes:
 apache2 (2.4.48-3.1ubuntu3) impish; urgency=medium
 .
   * SECURITY REGRESSION: Issues in UDS URIs (LP: #1945311)
     - debian/patches/CVE-2021-40438-2.patch: Fix UDS unix: scheme for P
       rules in modules/mappers/mod_rewrite.c.
     - debian/patches/CVE-2021-40438-3.patch: Handle UDS URIs with empty
       hostname in modules/mappers/mod_rewrite.c,
       modules/proxy/proxy_util.c.
Checksums-Sha1:
 842106f91f04682e0b57c94224aaf58113b4bf06 3375 apache2_2.4.48-3.1ubuntu3.dsc
 45f2f27a5e9f9732d720d31a8d6ed0cc3e00a2c8 912532 apache2_2.4.48-3.1ubuntu3.debian.tar.xz
 b29ace2c125029f3dd32037015a8c943382ad6c2 8462 apache2_2.4.48-3.1ubuntu3_source.buildinfo
Checksums-Sha256:
 e2ea000a8572bbd58048a3336e86665e373367dab0bd03a80aea5d068d20ed88 3375 apache2_2.4.48-3.1ubuntu3.dsc
 cc24573697b46ee5b829df3af2dae9308c9b2a72eb4441fb1b4a9e791fbc79b8 912532 apache2_2.4.48-3.1ubuntu3.debian.tar.xz
 748280f6d46964cea3ac9fccd7c689bd2860366edd106e2ef4e9279e638cb17c 8462 apache2_2.4.48-3.1ubuntu3_source.buildinfo
Files:
 e76eb71bb5ddc53136bae07d6348f71b 3375 httpd optional apache2_2.4.48-3.1ubuntu3.dsc
 d4e5c9d41b80920ec2e03745a5ee71f1 912532 httpd optional apache2_2.4.48-3.1ubuntu3.debian.tar.xz
 da034d9e290314503d10d6b1487e524d 8462 httpd optional apache2_2.4.48-3.1ubuntu3_source.buildinfo
Original-Maintainer: Debian Apache Maintainers <debian-apache at lists.debian.org>