Package: apache2 Version: 2.4.25-1 Severity: normal Dear Maintainer,
Upgrading from jessie to stretch partially broke the package "dwww" when using apache2 as web server. dwww is a CGI web application allowing easy access to the Debian documentation. Its entry page still works on stretch, but when trying to access any resource under /usr/share/doc through dwww, Apache returns an "500 Internal Server Error". To reproduce the problem one just has to go to http://localhost/dwww, and click on the top menu link for "/usr/share/doc". When looking at the Apache log, the following entry can be found: [Fri Jan 06 21:34:53.830541 2017] [http:error] [pid 6785:tid 140419151554304] [client ::1:45220] AH02429: Response header name 'Last modified' contains invalid characters, aborting request, referer: http://localhost/dwww/ When calling the dwww CGI script manually, the 'Last modified' field is correct however, here's the HTTP header part: Content-type: text/html Last modified: Tue Dec 13 14:16:35 2016 Content-Disposition: inline; filename="index.html" When using the very same dwww application with another web server (I tried lighttpd), it works fine as before so the issue is related to Apache. Compared to a default apache2 configuration, I just enabled the cgid module as well as the dwww, dhelp and dpkg-dwww configurations. No other changes under /etc/apache2. Thanks -- Package-specific info: -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.8.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages apache2 depends on: ii apache2-bin 2.4.25-1 ii apache2-data 2.4.25-1 ii apache2-utils 2.4.25-1 ii dpkg 1.18.18 ii init-system-helpers 1.46 ii lsb-base 9.20161125 ii mime-support 3.60 ii perl 5.24.1~rc4-1 pn perl:any <none> ii procps 2:3.3.12-3 Versions of packages apache2 recommends: ii ssl-cert 1.0.38 Versions of packages apache2 suggests: pn apache2-doc <none> pn apache2-suexec-pristine | apache2-suexec-custom <none> ii chromium [www-browser] 55.0.2883.75-3 ii konqueror [www-browser] 4:16.08.3-1 ii w3m [www-browser] 0.5.3-33 Versions of packages apache2-bin depends on: ii libapr1 1.5.2-5 ii libaprutil1 1.5.4-3 ii libaprutil1-dbd-sqlite3 1.5.4-3 ii libaprutil1-ldap 1.5.4-3 ii libc6 2.24-8 ii libldap-2.4-2 2.4.44+dfsg-2 ii liblua5.2-0 5.2.4-1.1+b1 ii libnghttp2-14 1.17.0-1 ii libpcre3 2:8.39-2 ii libssl1.0.2 1.0.2j-4 ii libxml2 2.9.4+dfsg1-2.1 pn perl:any <none> ii zlib1g 1:1.2.8.dfsg-4 Versions of packages apache2-bin suggests: pn apache2-doc <none> pn apache2-suexec-pristine | apache2-suexec-custom <none> ii chromium [www-browser] 55.0.2883.75-3 ii konqueror [www-browser] 4:16.08.3-1 ii w3m [www-browser] 0.5.3-33 Versions of packages apache2 is related to: ii apache2 2.4.25-1 ii apache2-bin 2.4.25-1 -- no debconf information