apache2_2.4.25-3+deb9u2_amd64.changes ACCEPTED into proposed-updates->stable-new

[Debian FTP Masters]

Mapping stable-security to proposed-updates.

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Tue, 18 Jul 2017 20:37:33 +0200
Source: apache2
Binary: apache2 apache2-data apache2-bin apache2-utils apache2-suexec-pristine 
apache2-suexec-custom apache2-doc apache2-dev apache2-ssl-dev apache2-dbg
Architecture: source amd64 all
Version: 2.4.25-3+deb9u2
Distribution: stretch-security
Urgency: medium
Maintainer: Debian Apache Maintainers 
Changed-By: Stefan Fritsch 
Description:
 apache2- Apache HTTP Server
 apache2-bin - Apache HTTP Server (modules and other binary files)
 apache2-data - Apache HTTP Server (common files)
 apache2-dbg - Apache debugging symbols
 apache2-dev - Apache HTTP Server (development headers)
 apache2-doc - Apache HTTP Server (on-site documentation)
 apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers)
 apache2-suexec-custom - Apache HTTP Server configurable suexec program for 
mod_suexec
 apache2-suexec-pristine - Apache HTTP Server standard suexec program for 
mod_suexec
 apache2-utils - Apache HTTP Server (utility programs for web servers)
Changes:
 apache2 (2.4.25-3+deb9u2) stretch-security; urgency=medium
 .
   * CVE-2017-9788: mod_auth_digest: Fix leak of uninitialized memory
Checksums-Sha1:
 dacb6fe4bad686f0c0667e27fe42d229d59fbd66 2986 apache2_2.4.25-3+deb9u2.dsc
 af595142656e8c4b34be07f97ba9170b504e7e07 697952 
apache2_2.4.25-3+deb9u2.debian.tar.xz
 93a97605bb009d6ea84cb39c0d2db899d784299d 1180034 
apache2-bin_2.4.25-3+deb9u2_amd64.deb
 93b2b4668eab19d558ca818452e674287f673479 162162 
apache2-data_2.4.25-3+deb9u2_all.deb
 e1739e673a3c1301a523f6641d2ac8cb3c3dca50 4001394 
apache2-dbg_2.4.25-3+deb9u2_amd64.deb
 1a0a909689e22571167d5765b09914c243e1e115 313118 
apache2-dev_2.4.25-3+deb9u2_amd64.deb
 74e60860097fb77543558a10b7ef6ecc304b2396 3770150 
apache2-doc_2.4.25-3+deb9u2_all.deb
 b27c77564983edba3ad183cc7a5212801133920c 2264 
apache2-ssl-dev_2.4.25-3+deb9u2_amd64.deb
 1cbfb4f7aed40724d4734162191e441807c68493 154630 
apache2-suexec-custom_2.4.25-3+deb9u2_amd64.deb
 a6a6b75ab9b065d1f52fba4e7ea92d6567261229 153156 
apache2-suexec-pristine_2.4.25-3+deb9u2_amd64.deb
 4eeb5e76e8ac1ed12c6fdcb9d2f0c0468a54b50e 216528 
apache2-utils_2.4.25-3+deb9u2_amd64.deb
 367a7a7828d6d3a4f8ae1c3017bf48e4173d93ff 9685 
apache2_2.4.25-3+deb9u2_amd64.buildinfo
 71e56d993af35324290a69a4246dd080bb764337 235148 
apache2_2.4.25-3+deb9u2_amd64.deb
Checksums-Sha256:
 c919d5adbd5027a3401a1768bc1e73587366fea8e16ac687a292b296336a5f87 2986 
apache2_2.4.25-3+deb9u2.dsc
 47137850b92ea03285e0f57b2ce64c2749612995a1a9b284b1c1abbb375ccfe4 697952 
apache2_2.4.25-3+deb9u2.debian.tar.xz
 eee8dce1fcae6c3504a420ba1d1fd783d676b29e90ecf270592a0e92d09752dc 1180034 
apache2-bin_2.4.25-3+deb9u2_amd64.deb
 0f532bfb133a0cafcd00dfea9a82a503e05cb618ef598a36c0d7688b434213e6 162162 
apache2-data_2.4.25-3+deb9u2_all.deb
 144a2eeff9f7fc1e1d35e5c1e4d594cf9ad22433971a4d2f8cba14e2028b9315 4001394 
apache2-dbg_2.4.25-3+deb9u2_amd64.deb
 22a7945c2757cffc957f19dfa81e0792f1554b92fbb26e99328a604eded39d20 313118 
apache2-dev_2.4.25-3+deb9u2_amd64.deb
 c622a76f5f758e92d4ccffabed75598484bae83c0968bb80d77bcc1c7339c130 3770150 
apache2-doc_2.4.25-3+deb9u2_all.deb
 6ebcb55096ce0518d7fefb5b79dc491b21eb3626087a0d651eafbdf180a9b91f 2264 
apache2-ssl-dev_2.4.25-3+deb9u2_amd64.deb
 298aac43097bc0f310dcbd0bff519e4c6cd76e966a5593d41fc42847574dc08e 154630 
apache2-suexec-custom_2.4.25-3+deb9u2_amd64.deb
 cc6550e40013022d33353a460903ebfe7696a44a5cd404a02e23910ed1f68038 153156 
apache2-suexec-pristine_2.4.25-3+deb9u2_amd64.deb
 9562aacafb42cb6b08acbcc479487e9556fadcb180e7b6743696f1d9b0a6d5b4 216528 
apache2-utils_2.4.25-3+deb9u2_amd64.deb
 14de3de522404bb92562eeef12a17f929b3c5564386e62c3e0ebf79c0b08c2ca 9685 
apache2_2.4.25-3+deb9u2_amd64.buildinfo
 1d4da041f9d75f2fce6fd170b0ee74ab57c6e968f3da730e5f34eb5804e6a2aa 235148 
apache2_2.4.25-3+deb9u2_amd64.deb
Files:
 aafd418429e6c61e269f7cfbd4c8e37e 2986 httpd optional 
apache2_2.4.25-3+deb9u2.dsc
 2cb1813a314d59fce038f6cd3f88631f 697952 httpd optional 
apache2_2.4.25-3+deb9u2.debian.tar.xz
 7f832796b414cd3bbc031e8d7b01e01c 1180034 httpd optional 
apache2-bin_2.4.25-3+deb9u2_amd64.deb
 a3aa0a84be555e01f87fa7f5503b4217 162162 httpd optional 
apache2-data_2.4.25-3+deb9u2_all.deb
 eec6318f071dfb7d5b8dccedc7d5db29 4001394 debug extra 
apache2-dbg_2.4.25-3+deb9u2_amd64.deb
 6765eb59a9121226bde6610c7079fdf5 313118 httpd optional 
apache2-dev_2.4.25-3+deb9u2_amd64.deb
 3cfa45cc2a4e497dcfb324f28ebd80e9 3770150 doc optional 
apache2-doc_2.4.25-3+deb9u2_all.deb
 2563eaa6c77d4c21c2e5e71d6131809c 2264 httpd optional 
apache2-ssl-dev_2.4.25-3+deb9u2_amd64.deb
 515524c16d4db41b08a5de0647b30a95 154630 httpd extra 
apache2-suexec-custom_2.4.25-3+deb9u2_amd64.deb
 a0269b032022d29c6212c8ff74b86664 153156 httpd optional 
apache2-suexec-pristine_2.4.25-3+deb9u2_amd64.deb
 b509377ca37975d449a1595bcd416327 216528 httpd optional 

apache2_2.4.10-10+deb8u10_amd64.changes ACCEPTED into oldstable-proposed-updates->oldstable-new

[Debian FTP Masters]

Mapping oldstable-security to oldstable-proposed-updates.

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Tue, 18 Jul 2017 20:29:16 +0200
Source: apache2
Binary: apache2 apache2-data apache2-bin apache2-mpm-worker apache2-mpm-prefork 
apache2-mpm-event apache2-mpm-itk apache2.2-bin apache2.2-common 
libapache2-mod-proxy-html libapache2-mod-macro apache2-utils apache2-suexec 
apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev 
apache2-dbg
Architecture: source amd64 all
Version: 2.4.10-10+deb8u10
Distribution: jessie-security
Urgency: medium
Maintainer: Debian Apache Maintainers 
Changed-By: Stefan Fritsch 
Description:
 apache2- Apache HTTP Server
 apache2-bin - Apache HTTP Server (modules and other binary files)
 apache2-data - Apache HTTP Server (common files)
 apache2-dbg - Apache debugging symbols
 apache2-dev - Apache HTTP Server (development headers)
 apache2-doc - Apache HTTP Server (on-site documentation)
 apache2-mpm-event - transitional event MPM package for apache2
 apache2-mpm-itk - transitional itk MPM package for apache2
 apache2-mpm-prefork - transitional prefork MPM package for apache2
 apache2-mpm-worker - transitional worker MPM package for apache2
 apache2-suexec - transitional package for apache2-suexec-pristine
 apache2-suexec-custom - Apache HTTP Server configurable suexec program for 
mod_suexec
 apache2-suexec-pristine - Apache HTTP Server standard suexec program for 
mod_suexec
 apache2-utils - Apache HTTP Server (utility programs for web servers)
 apache2.2-bin - Transitional package for apache2-bin
 apache2.2-common - Transitional package for apache2
 libapache2-mod-macro - Transitional package for apache2-bin
 libapache2-mod-proxy-html - Transitional package for apache2-bin
Changes:
 apache2 (2.4.10-10+deb8u10) jessie-security; urgency=medium
 .
   * CVE-2017-9788: mod_auth_digest: Fix leak of uninitialized memory
Checksums-Sha1:
 a9bec52db372c18a0ae6bc96b3a2eb72ca469da0 3281 apache2_2.4.10-10+deb8u10.dsc
 ee8dde0e307f5acca17091a70630872fe8d936ba 558192 
apache2_2.4.10-10+deb8u10.debian.tar.xz
 dbade9eae53b15b7954320ac3c0b28a52a33b265 1154 
libapache2-mod-proxy-html_2.4.10-10+deb8u10_amd64.deb
 2171f99bb5ae8b64dd0f8ae1aa48200774db8b90 1148 
libapache2-mod-macro_2.4.10-10+deb8u10_amd64.deb
 a3311bd1fd927637428b0f8ccfeac7e63177a865 207984 
apache2_2.4.10-10+deb8u10_amd64.deb
 9fc31f7cc14cb496e22b33251d25d5ba724cf74a 162580 
apache2-data_2.4.10-10+deb8u10_all.deb
 f5ab74f71d42fef3fdf31aee913929198b2c3510 1039192 
apache2-bin_2.4.10-10+deb8u10_amd64.deb
 dbd6902228170009423e6ce49e803f003538fa53 1520 
apache2-mpm-worker_2.4.10-10+deb8u10_amd64.deb
 13e935f10e623d9e3a22a1dcdbf6244005d95ba9 1518 
apache2-mpm-prefork_2.4.10-10+deb8u10_amd64.deb
 3abcbe25e251c0f778d5448f57c819fc576d17d7 1518 
apache2-mpm-event_2.4.10-10+deb8u10_amd64.deb
 3c9459f33f0a7f841f0ba5aa33df24056633bf3d 1516 
apache2-mpm-itk_2.4.10-10+deb8u10_amd64.deb
 8f85b53fd74c353fbde9b7e7e51df45b2947948e 1702 
apache2.2-bin_2.4.10-10+deb8u10_amd64.deb
 ed8346ca6d79df76aa4d93dbc37c803c5327e669 125454 
apache2.2-common_2.4.10-10+deb8u10_amd64.deb
 b5175701b21b0ab3902fe9cded62dda3593b8ede 195676 
apache2-utils_2.4.10-10+deb8u10_amd64.deb
 159f2bc353173a46c97955dcb899e910574d2ba7 1666 
apache2-suexec_2.4.10-10+deb8u10_amd64.deb
 809811173e8f42e2c0fde42eb85055e1ba3ba00f 130624 
apache2-suexec-pristine_2.4.10-10+deb8u10_amd64.deb
 82d86c15098eb67565b60bd4ccc08d488a556a51 132148 
apache2-suexec-custom_2.4.10-10+deb8u10_amd64.deb
 c2fe6c0796de89bde60dc5c88f926af56cda1576 2726870 
apache2-doc_2.4.10-10+deb8u10_all.deb
 20b926647fb9a2c0dd1f30bc48de649067b0e560 282474 
apache2-dev_2.4.10-10+deb8u10_amd64.deb
 228ff8eaab74dcaaad3ec902f60249f171372141 1710686 
apache2-dbg_2.4.10-10+deb8u10_amd64.deb
Checksums-Sha256:
 818e2cea2c65448a89b1d513c69c100f044894fa19d7065744cad5f3db85 3281 
apache2_2.4.10-10+deb8u10.dsc
 7d722793f3436428ce87e5d67f5755c6d627f9fac50272cba86e77759edaa63c 558192 
apache2_2.4.10-10+deb8u10.debian.tar.xz
 514d5f175261829e0a4cacd2ee29617610ae072a59046c2e49e5edf9bed95ef0 1154 
libapache2-mod-proxy-html_2.4.10-10+deb8u10_amd64.deb
 29d586ac826231223698b7ff78f63383bdbb6379f7997b96d78d55a48e0e 1148 
libapache2-mod-macro_2.4.10-10+deb8u10_amd64.deb
 6f443967bd1a677bf9ea696a9b3fb5bc2b9270a2bba2e5eee89f53d5dc2dd8cc 207984 
apache2_2.4.10-10+deb8u10_amd64.deb
 7972bc22bf3fd4d5ff259074710cda2e70c39a07d1efec26de7d55ed70eec1c0 162580 
apache2-data_2.4.10-10+deb8u10_all.deb
 005a2d7502bc8051cc85710037dd2303cc5470cb4341b80580b79d2c803b5cab 1039192 
apache2-bin_2.4.10-10+deb8u10_amd64.deb
 6402cfd3cc0349ab2a9db4a881c90b7e4acd7ec59af165a84472db5166c43297 1520 
apache2-mpm-worker_2.4.10-10+deb8u10_amd64.deb
 bcf1878a06e46eea7c0cf1ead6823bd1646fc90ddc96107ba79099dffb06de9b 1518 
apache2-mpm-prefork_2.4.10-10+deb8u10_amd64.deb
 5ba1a0298e745befba1028a7ed48d24dc5f59fe19792f9f2b1e33bb248ae1619 1518 

Processing of apache2_2.4.25-3+deb9u2_amd64.changes

[Debian FTP Masters]

apache2_2.4.25-3+deb9u2_amd64.changes uploaded successfully to localhost
along with the files:
  apache2_2.4.25-3+deb9u2.dsc
  apache2_2.4.25-3+deb9u2.debian.tar.xz
  apache2-bin_2.4.25-3+deb9u2_amd64.deb
  apache2-data_2.4.25-3+deb9u2_all.deb
  apache2-dbg_2.4.25-3+deb9u2_amd64.deb
  apache2-dev_2.4.25-3+deb9u2_amd64.deb
  apache2-doc_2.4.25-3+deb9u2_all.deb
  apache2-ssl-dev_2.4.25-3+deb9u2_amd64.deb
  apache2-suexec-custom_2.4.25-3+deb9u2_amd64.deb
  apache2-suexec-pristine_2.4.25-3+deb9u2_amd64.deb
  apache2-utils_2.4.25-3+deb9u2_amd64.deb
  apache2_2.4.25-3+deb9u2_amd64.buildinfo
  apache2_2.4.25-3+deb9u2_amd64.deb

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

Processing of apache2_2.4.10-10+deb8u10_amd64.changes

[Debian FTP Masters]

apache2_2.4.10-10+deb8u10_amd64.changes uploaded successfully to localhost
along with the files:
  apache2_2.4.10-10+deb8u10.dsc
  apache2_2.4.10-10+deb8u10.debian.tar.xz
  libapache2-mod-proxy-html_2.4.10-10+deb8u10_amd64.deb
  libapache2-mod-macro_2.4.10-10+deb8u10_amd64.deb
  apache2_2.4.10-10+deb8u10_amd64.deb
  apache2-data_2.4.10-10+deb8u10_all.deb
  apache2-bin_2.4.10-10+deb8u10_amd64.deb
  apache2-mpm-worker_2.4.10-10+deb8u10_amd64.deb
  apache2-mpm-prefork_2.4.10-10+deb8u10_amd64.deb
  apache2-mpm-event_2.4.10-10+deb8u10_amd64.deb
  apache2-mpm-itk_2.4.10-10+deb8u10_amd64.deb
  apache2.2-bin_2.4.10-10+deb8u10_amd64.deb
  apache2.2-common_2.4.10-10+deb8u10_amd64.deb
  apache2-utils_2.4.10-10+deb8u10_amd64.deb
  apache2-suexec_2.4.10-10+deb8u10_amd64.deb
  apache2-suexec-pristine_2.4.10-10+deb8u10_amd64.deb
  apache2-suexec-custom_2.4.10-10+deb8u10_amd64.deb
  apache2-doc_2.4.10-10+deb8u10_all.deb
  apache2-dev_2.4.10-10+deb8u10_amd64.deb
  apache2-dbg_2.4.10-10+deb8u10_amd64.deb

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

Re: Wheezy update of apache2?

[Stefan Fritsch]

On Monday, 17 July 2017 16:57:00 CEST Roberto C. Sánchez wrote:
> I did the deb7u9 update of apache2 and I was not aware of the regression
> either.  I wonder if it makes sense for bugs above a certain severity
> affecting versions of a package which are security uploads to show up in
> the security tracker.  Or would there be some other sensible way, aside
> from having to go to the BTS directly?

Sorry that I haven't forwarded that to you in a timely manner. I think I have 
mentioned it before the previous upload, but it may have gotten lost 
somewhere.

I don't know how a reasonable automatic notification could look like. Probably 
it has to be up to the maintainer to forward such bug reports.

Cheers,
Stefan