ubuntu/+source/apache2:applied/ubuntu/precise-security

Last commit made on 2016-07-18
Get this branch:
git clone -b applied/ubuntu/precise-security https://git.launchpad.net/ubuntu/+source/apache2
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
applied/ubuntu/precise-security
Repository:
lp:ubuntu/+source/apache2

Recent commits

e5b7bb8... by Marc Deslauriers on 2016-07-14

Import patches-applied version 2.2.22-1ubuntu1.11 to applied/ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: e687fed6ae4aa3ea1612e74d20f48bcecb6c55cc
Unapplied parent: a965cf1db7620c2141bd3a958b48f44351a05e8f

New changelog entries:
  * SECURITY UPDATE: proxy request header vulnerability (httpoxy)
    - debian/patches/CVE-2016-5387.patch: don't pass through HTTP_PROXY in
      server/util_script.c.
    - CVE-2016-5387
  * This update does _not_ contain the changes from (2.4.7-1ubuntu4.12) in
    trusty-proposed.

a965cf1... by Marc Deslauriers on 2016-07-14

fix proxy request header vulnerability (httpoxy)

Gbp-Pq: CVE-2016-5387.patch.

5ebd0ce... by Marc Deslauriers on 2016-07-14

fix request smuggling via chunked transfer encoding

Gbp-Pq: CVE-2015-3183.patch.

9a29b52... by Marc Deslauriers on 2016-07-14

[PATCH] Merge r1526168, r1527291, r1527295, r1563420, r1588851,

Gbp-Pq: ephemeral_key_handling.patch.

2a81ff5... by Marc Deslauriers on 2016-07-14

[PATCH] mod_ssl: when compiled against OpenSSL 1.0.1 or later, allow

Gbp-Pq: tls_options.patch.

9d04950... by Marc Deslauriers on 2016-07-14

[PATCH] Merge r834378, r835046, r1040304, r1040373, r1090645,

Gbp-Pq: ecc_support.patch.

ddedbac... by Marc Deslauriers on 2016-07-14

[PATCH] Merge r1610814, r1610686, r1610707 from trunk:

Gbp-Pq: CVE-2013-5704.patch.

1718df2... by Marc Deslauriers on 2016-07-14

fix denial of service in mod_cgid

Gbp-Pq: CVE-2014-0231.patch.

1498f06... by Marc Deslauriers on 2016-07-14

fix denial of service via race in mod_status

Gbp-Pq: CVE-2014-0226.patch.

16eef1b... by Marc Deslauriers on 2016-07-14

fix resource consumption via mod_deflate body decompression

Gbp-Pq: CVE-2014-0118.patch.