Accepting request 723497 from home:stroeder:branches:Apache

update to 2.4.41

OBS-URL: https://build.opensuse.org/request/show/723497
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=585

apache2.changes

@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Thu Aug 15 09:05:22 UTC 2019 - Michael Ströder <michael@stroeder.com>
+
+- version update to 2.4.41 with security fixes:
+  * low: Limited cross-site scripting in mod_proxy
+    error page (CVE-2019-10092)
+  * low: mod_rewrite potential open redirect (CVE-2019-10098)
+  * moderate: mod_http2, read-after-free in h2
+    connection shutdown (CVE-2019-10082)
+  * moderate: mod_http2, memory corruption on
+    early pushes (CVE-2019-10081)
+  * moderate: mod_http2, DoS attack by exhausting
+    h2 workers. (CVE-2019-9517)
+  * moderate: mod_remoteip: Stack buffer overflow and
+    NULL pointer dereference (CVE-2019-10097)
+
 -------------------------------------------------------------------
 Wed Jun 26 07:34:16 UTC 2019 - pgajdos@suse.com
 

apache2.spec

@@ -65,7 +65,7 @@
 %define build_http2 0
 %endif
 Name:           apache2
-Version:        2.4.39
+Version:        2.4.41
 Release:        0
 Summary:        The Apache Web Server Version 2.4
 License:        Apache-2.0

httpd-2.4.39.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b4ca9d05773aa59b54d66cd8f4744b945289f084d3be17d7981d1783a5decfa2
-size 7030539

httpd-2.4.39.tar.bz2.asc

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCAAdFiEEueghOu+4Ya81pB8smV41IhrYTf8FAlybkZUACgkQmV41IhrY
-Tf95uwgAxLwIsW7SFVXjYND69EBKwUPddPgvLTXCC8Qb7v49nkGLQbNp7Emiolsq
-CcgIjUNtKCgOSI/diAH0Ii2e3FpdvmZKgxWKqGXAn5xUSq4Sp9McQb1S46x925gU
-J+Qqm4e3+JiY3nBntPx3K2j8/33hX/QMDxOTqnYE+m/l5uyL713Ed2LeJe6Dc4oE
-PxAmNm2TEdWfAG0/ZIzhGkZEoEjLQLTKJ6MVpEFeF7UKVJVc2aeA6a8FOilIoCXX
-k0/fFc8ljjogy4tia3EiKZCW3VRVYeZa7IiSlTRo8UhUKPAF8h4/I8T35Mq1n3mV
-KPMrkTtxb9N3o91KFSJHaXuIKxrltw==
-=lnVM
------END PGP SIGNATURE-----

httpd-2.4.41.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:133d48298fe5315ae9366a0ec66282fa4040efa5d566174481077ade7d18ea40
+size 7072373

httpd-2.4.41.tar.bz2.asc

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCAAdFiEEueghOu+4Ya81pB8smV41IhrYTf8FAl1NdwkACgkQmV41IhrY
+Tf/7cQf/YbevWNKn+DaPX+3pZ8BblqhMYzYZLDavSejV4dKzXoF0FA2IkMxq9Gh7
+y6cbLaycTOewkV2HZmtBhBLJRDlOLISKmkzXdq2qZJq9UR3aGFXnpZfRfaLBPExx
+XX0H0con4n8qvcPTAfOSc6uT64HR9kZlAzPjr2I2nsZht3rDsXw+pvA0AhpfpqPS
+7FSVMTXb7WUvMJauJdLetV2l8vY5P9LGDGMc7YPSfjGY3nrZJJv1DqCChF52SHph
+6C0FPDjrewIIzUyJLKTkBH+dK6Wx1Lv4blBqOX+FK0Zj79zSwcNkZJDxoEdpYjyk
+cPCTuAUKTV9e29TN1elZgP2ES75H4Q==
+=vwtE
+-----END PGP SIGNATURE-----