Back to apache2 PTS page

Accepted apache2 2.4.4-1 (source amd64 all)



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Thu, 07 Mar 2013 01:24:51 +0100
Source: apache2
Binary: apache2 apache2-data apache2-bin apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-mpm-itk apache2.2-bin libapache2-mod-proxy-html apache2-utils apache2-suexec apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-dbg
Architecture: source amd64 all
Version: 2.4.4-1
Distribution: experimental
Urgency: low
Maintainer: Debian Apache Maintainers <debian-apache@lists.debian.org>
Changed-By: Arno Töll <arno@debian.org>
Description: 
 apache2    - Apache HTTP Server
 apache2-bin - Apache HTTP Server (binary files and modules)
 apache2-data - Apache HTTP Server (common files)
 apache2-dbg - Apache debugging symbols
 apache2-dev - Apache HTTP Server (development headers)
 apache2-doc - Apache HTTP Server (on-site documentation)
 apache2-mpm-event - transitional event MPM package for apache2
 apache2-mpm-itk - transitional itk MPM package for apache2
 apache2-mpm-prefork - transitional prefork MPM package for apache2
 apache2-mpm-worker - transitional worker MPM package for apache2
 apache2-suexec - transitional package for apache2-suexec-pristine
 apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec
 apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec
 apache2-utils - Apache HTTP Server (utility programs for web servers)
 apache2.2-bin - Transitional package for apache2-bin
 libapache2-mod-proxy-html - Transitional package for apache2-bin
Closes: 666816 671683 681541 681542 682840 691365 691440 693292 701117
Changes: 
 apache2 (2.4.4-1) experimental; urgency=low
 .
   * New upstream release
     - Fixes mod_log_forensic logging spurious '-' characters. Closes: #693292
     - Responds with HTTP/1.0 when talking http to https port. Closes: #701117
     - Fix various XSS flaws in modules (CVE-2012-3499, CVE-2012-4558)
 .
   [ Stefan Fritsch ]
   * Add examples for X-Content-Type-Options and X-Frame-Options to
     security.conf.
   * Make dh_apache2 only accept shell function names as conditional, to avoid
     problems with shell and sed special characters.
   * Add Replaces for the old mpm packages to apache2-bin. Closes: #671683
   * Add transitional package for libapache2-mod-proxy-html. Closes: #666816
     - Override dh_gencontrol so that the package's version sorts later than
       the existing version in Wheezy.
   * Don't ship changelogs in the apache2.2-bin transitional package.
   * CVE-2013-1048: Fix symlink vulnerability when creating /var/lock/apache2
 .
   [ Arno Töll ]
   * Rewrite most parts of the init script to make it more readable and improve
     visual feedback when fancy output is in use.
   * Drop the dbmanage tool from apache2-utils. It is mostly unmaintained and
     outdated. Users of mod_authn_dbm should use htdbm instead.
   * Fix "Default /etc/apache2/mods-available/disk_cache.conf is incompatible
     with ext3" by changing the default to more moderate values. Note, some file
     systems have a hard limit of supported subdirectories (Closes: #682840).
     Ported from our 2.2 tree targeted for Wheezy.
   * Properly check return code of a2query in the apache2_invoke library
     function. This caused reverse dependencies to fail for newly installed
     modules previously.
   * Implement -q (quiet) option for a2query (Closes: #681541).
   * Properly honor -p/-N options as understood by debhelper (Closes: 681542).
     Thanks Russ Allbery for the hint.
   * Be more careful regarding link attacks when for the the cache disk
     directory.
   * Compress the data.tar in binary packages using xz to save some space on
     installation medias (Debian only).
   * Fix "invoke-rc.d apache2 status fails" by merging patch of Jean-Michel
     Vourgère. Thanks! (Closes: #691365)
   * Fix "copyright file missing after upgrade (policy 12.5)" - add link
     manually when necessary in postinst (Closes: #691440)
   * Document APACHE_ARGUMENTS in envvars (ported from our 2.2 branch, reported as #693299)
   * Don't croak about lacking permissions in apache2ctl when the script is
     executed as a non-privileged user
 .
   [ Bernhard R. Link ]
 .
   * Rearrane patches: Move all the patches or parts of patches touching non-itk
     specific files (i.e. those from the upstream tarball) directly in the
     debian/patches/series series.  While this seperates the itk patches into two
     heaps, it makes both more visible what changes happen to the general code (and
     thus are also done to the other servers generated)
Checksums-Sha1: 
 c0587902afe5e0d2862d5ecd8728cd738a1d693e 3014 apache2_2.4.4-1.dsc
 0c5ab7f876aa10fbe8bfab2c34f8dd3dc76db16c 4780289 apache2_2.4.4.orig.tar.bz2
 419e5bfe6424c8dee9818180aee431759e037d26 182803 apache2_2.4.4-1.debian.tar.gz
 73398115e38e11403850b385a06c32b1b26654a3 866 libapache2-mod-proxy-html_2.4+transitional1_amd64.deb
 cca95eb3a40ef2c37f95e834ab221fd6b033ee23 180896 apache2_2.4.4-1_amd64.deb
 803729c5d6722cad4ee742219fb81869fde622c7 151800 apache2-data_2.4.4-1_all.deb
 80f79a8230abdec8b736040cad50bd4957db32bb 942348 apache2-bin_2.4.4-1_amd64.deb
 932050daaa0863ba7cc9bf487c2a595945d61f7c 848 apache2-mpm-worker_2.4.4-1_amd64.deb
 3fb25022d89af6c574144669cd82cf04abda495d 852 apache2-mpm-prefork_2.4.4-1_amd64.deb
 495f672e135b467f463667b81abcd05fe066433d 848 apache2-mpm-event_2.4.4-1_amd64.deb
 26338e7af8f681b08038909c3128c73d19388ce0 844 apache2-mpm-itk_2.4.4-1_amd64.deb
 6eabb8c0a22b717beee349bc04b20268055fd9a6 854 apache2.2-bin_2.4.4-1_amd64.deb
 b95b111668d843ac39706ab3b99d721818fb25b0 175740 apache2-utils_2.4.4-1_amd64.deb
 b7acf442bb158044714061885b2a164332c8f2f7 1388 apache2-suexec_2.4.4-1_amd64.deb
 874564a028cbff0e1837b17545eb4dbec56bd6e6 110214 apache2-suexec-pristine_2.4.4-1_amd64.deb
 a4ec6bbe090ce7e8c5d4451b5908ee331df26cd1 111718 apache2-suexec-custom_2.4.4-1_amd64.deb
 b9c0536cce5f5f806432d5a61e58f310ab0e2005 2560306 apache2-doc_2.4.4-1_all.deb
 b5d7233542b19d31d7cea9f5c5442f16a885ba8c 154906 apache2-dev_2.4.4-1_amd64.deb
 ca255aa1b9d2ec50eb33179be15effcf8f602b6f 2066258 apache2-dbg_2.4.4-1_amd64.deb
Checksums-Sha256: 
 d0f758052646808e612b55d5c36fb3e213a1a3b3b59183d6182f14132b2b6f78 3014 apache2_2.4.4-1.dsc
 92aabddeca76a4ac7330b143df1407bbf35574c7291c15172238ac598d97655c 4780289 apache2_2.4.4.orig.tar.bz2
 2d9906181f96475cc393d70ea4317118c06c6c8fb09a953726ba2a55f317c1ef 182803 apache2_2.4.4-1.debian.tar.gz
 30b212331f9a2d8234a8b775006ecc3c725c20273981aad5b760ccf2659e7bfe 866 libapache2-mod-proxy-html_2.4+transitional1_amd64.deb
 3fab469185e19608820436ef9f852fdc26046900cf03d244c7b7660447ff9fc0 180896 apache2_2.4.4-1_amd64.deb
 c07f0d1e9830088b49c25585c185451bdfe66951a064e37da5e1ec49328f6c65 151800 apache2-data_2.4.4-1_all.deb
 caa9e42b6d72726be46502f396db742592817bd5e427471417ba279b583d633d 942348 apache2-bin_2.4.4-1_amd64.deb
 2abc0b37ec2b8bc59eaa375c7a4e9fb61287872dc0dbfe13d54319cb660e3934 848 apache2-mpm-worker_2.4.4-1_amd64.deb
 3447183a8ffaebe726bcf12b4ae12b2c8264b01c8d5623615efe623e03b24485 852 apache2-mpm-prefork_2.4.4-1_amd64.deb
 31df1cb84b68694dbffb2df439dd0811b5bc7e0ddc47c114c7cd3ad7fde38617 848 apache2-mpm-event_2.4.4-1_amd64.deb
 009721ffecc8bfd12f9091fa267a643a35ab050c98e3a95c3bf632bc4e02a052 844 apache2-mpm-itk_2.4.4-1_amd64.deb
 4ce999d60a3d4178d0c791785700a3d9c23abf55d97abba43511f473f087e757 854 apache2.2-bin_2.4.4-1_amd64.deb
 ac8589dd3fa301d456a4ad213bd95164700796a69215470e382aafdfa462b729 175740 apache2-utils_2.4.4-1_amd64.deb
 7ccfe1ea37131eaf24eba1dd835fe70713526bb519eb5c7cdf29e45512ce4a19 1388 apache2-suexec_2.4.4-1_amd64.deb
 73158ae6f923efd7033b9717fd9f6e2f95ef1959669b68288da4a935015688dd 110214 apache2-suexec-pristine_2.4.4-1_amd64.deb
 06b4f589fd2b8b5908379e1d8c440ff100ccd265915854c2ee16763d3c47ccf1 111718 apache2-suexec-custom_2.4.4-1_amd64.deb
 5d927baff5b136e915b507dfc3241871cc77d2a7b4337a3a1c402d9da68f9588 2560306 apache2-doc_2.4.4-1_all.deb
 c77d4812c5b6c433c0615b75df62699217e2077525f7c72a2b6f2b9f28398209 154906 apache2-dev_2.4.4-1_amd64.deb
 11e901a051403706ced57c41a2b6dde2330749e7dd6a104bf9c410bf71023e90 2066258 apache2-dbg_2.4.4-1_amd64.deb
Files: 
 e65f36613d95025d5b7acdc41b38cf76 3014 httpd optional apache2_2.4.4-1.dsc
 0e712ee2119cd798c8ae39d5f11a9206 4780289 httpd optional apache2_2.4.4.orig.tar.bz2
 898d7b89aa65aeab72d63eb1167ca429 182803 httpd optional apache2_2.4.4-1.debian.tar.gz
 8a38ed79c868e9b461d054b43a698c38 866 oldlibs extra libapache2-mod-proxy-html_2.4+transitional1_amd64.deb
 b82f31e54ac129dfbc25d9aeb94c0c5c 180896 httpd optional apache2_2.4.4-1_amd64.deb
 eea1aab7e0d86d9a5390c0ff1f7493ac 151800 httpd optional apache2-data_2.4.4-1_all.deb
 2103c45138f9fd17ba911509571b6663 942348 httpd optional apache2-bin_2.4.4-1_amd64.deb
 ef6eed285688ef14065cc8b87ffdb5d1 848 oldlibs extra apache2-mpm-worker_2.4.4-1_amd64.deb
 a6e7ef52836a8d6eb9886f764313eeb5 852 oldlibs extra apache2-mpm-prefork_2.4.4-1_amd64.deb
 1dcb49cd76df969e6a8f48cddcc459b2 848 oldlibs extra apache2-mpm-event_2.4.4-1_amd64.deb
 169791f6e7af64c46f6a5eb201bc8c0a 844 oldlibs extra apache2-mpm-itk_2.4.4-1_amd64.deb
 03a58f91b2276058cb7e7c653020fdd9 854 oldlibs extra apache2.2-bin_2.4.4-1_amd64.deb
 ce2d09e36c064743d4d5bebea98e2beb 175740 httpd optional apache2-utils_2.4.4-1_amd64.deb
 ee90718991ea0c11f159bb75790c0de2 1388 oldlibs extra apache2-suexec_2.4.4-1_amd64.deb
 964023436aa853acf0be872f64d6da5f 110214 httpd optional apache2-suexec-pristine_2.4.4-1_amd64.deb
 b18ed9180b3d2f76c7a80b462c27a4e9 111718 httpd extra apache2-suexec-custom_2.4.4-1_amd64.deb
 741dbe4d312d154ceeb8256c5540f461 2560306 doc optional apache2-doc_2.4.4-1_all.deb
 f9a5b9451dc43b353652c049aa227ec6 154906 httpd optional apache2-dev_2.4.4-1_amd64.deb
 db4a1311c11b51ede71109a7e30b1d5f 2066258 debug extra apache2-dbg_2.4.4-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=NYFt
-----END PGP SIGNATURE-----