[ubuntu/artful-proposed] apache2 2.4.27-2ubuntu3 (Accepted)

[Marc Deslauriers]

apache2 (2.4.27-2ubuntu3) artful; urgency=medium

  * SECURITY UPDATE: optionsbleed information leak
    - debian/patches/CVE-2017-9798.patch: disallow method registration
      at run time in server/core.c.
    - CVE-2017-9798

Date: Mon, 18 Sep 2017 11:05:48 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/apache2/2.4.27-2ubuntu3
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 18 Sep 2017 11:05:48 -0400
Source: apache2
Binary: apache2 apache2-data apache2-bin apache2-utils apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-ssl-dev apache2-dbg
Architecture: source
Version: 2.4.27-2ubuntu3
Distribution: artful
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 apache2    - Apache HTTP Server
 apache2-bin - Apache HTTP Server (modules and other binary files)
 apache2-data - Apache HTTP Server (common files)
 apache2-dbg - Apache debugging symbols
 apache2-dev - Apache HTTP Server (development headers)
 apache2-doc - Apache HTTP Server (on-site documentation)
 apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers)
 apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec
 apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec
 apache2-utils - Apache HTTP Server (utility programs for web servers)
Changes:
 apache2 (2.4.27-2ubuntu3) artful; urgency=medium
 .
   * SECURITY UPDATE: optionsbleed information leak
     - debian/patches/CVE-2017-9798.patch: disallow method registration
       at run time in server/core.c.
     - CVE-2017-9798
Checksums-Sha1:
 959c95d9abfebcb646518e045b0b28b61e67a6c6 3035 apache2_2.4.27-2ubuntu3.dsc
 30b328b4075551cc18494b1fcc564842f0a5806e 708120 apache2_2.4.27-2ubuntu3.debian.tar.xz
 23be1bc45dff1d6bb61b13e045549e55094cb267 7804 apache2_2.4.27-2ubuntu3_source.buildinfo
Checksums-Sha256:
 6bf5b01884b4d87e74a63cb0fc3d0f450bcafec23a8d8dee9dfdd3742c26e9c8 3035 apache2_2.4.27-2ubuntu3.dsc
 23b6270aa40121527f0f594a5508c44f697108b004f38426e1bd370fa19c86a2 708120 apache2_2.4.27-2ubuntu3.debian.tar.xz
 7f99eac84d2d33a89b51d80ffc860d901089017e5293d4328be301651e6ba035 7804 apache2_2.4.27-2ubuntu3_source.buildinfo
Files:
 bbc82b55040039048974b2e17501a02b 3035 httpd optional apache2_2.4.27-2ubuntu3.dsc
 e8b5f8f96cca702ae2594d30b6f7ea14 708120 httpd optional apache2_2.4.27-2ubuntu3.debian.tar.xz
 a5eb3c050f8817b4b67afd4528bd971e 7804 httpd optional apache2_2.4.27-2ubuntu3_source.buildinfo
Original-Maintainer: Debian Apache Maintainers <debian-apache at lists.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=KlGN
-----END PGP SIGNATURE-----