Thorsten Alteholz authored Jan 29, 2019 and Jonas Meurer committed Apr 03, 2019

apache2 (2.4.10-10+deb8u13) jessie-security; urgency=medium

  * Non-maintainer upload by the LTS Team. 
  * CVE-2018-17199
    In order to not ignore expire time of cookies, always decode session
    attributes early.

Fix out of bound write in mod_authnz_ldap when using too small
Accept-Language values.

The 'return 1' could never trigger because cut always returns 0.

this fixes 'systemctl status'

While there, add some rel="nofollow" to other links. Also update
problematic index.html files in postinst.

It sources the main init script, which is not designed to work with
'set -e'