Your message dated Tue, 21 Oct 2014 21:19:30 +0000 with message-id <[email protected]> and subject line Bug#765347: fixed in apache2 2.4.10-6 has caused the Debian Bug report #765347, regarding Disable SSLv3 in default config to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 765347: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765347 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: apache2 Version: 2.4.10-5 Severity: wishlist Hi, The shipped mods-available/ssl.conf now contains: # The protocols to enable. # Available values: all, SSLv3, TLSv1, TLSv1.1, TLSv1.2 # SSL v2 is no longer supported SSLProtocol all I propose to change that to !SSLv3. This protocol version is long deprecated and only required to suport rare and insecure platforms like IE6 on XP. Those that really need it can enable it, but having it disabled would be a sane default for Jessie. Cheers, Thijs
--- End Message ---
--- Begin Message ---Source: apache2 Source-Version: 2.4.10-6 We believe that the bug you reported is fixed in the latest version of apache2, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Stefan Fritsch <[email protected]> (supplier of updated apache2 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 21 Oct 2014 22:42:06 +0200 Source: apache2 Binary: apache2 apache2-data apache2-bin apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-mpm-itk apache2.2-bin apache2.2-common libapache2-mod-proxy-html libapache2-mod-macro apache2-utils apache2-suexec apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-dbg Architecture: source amd64 all Version: 2.4.10-6 Distribution: unstable Urgency: medium Maintainer: Debian Apache Maintainers <[email protected]> Changed-By: Stefan Fritsch <[email protected]> Description: apache2 - Apache HTTP Server apache2-bin - Apache HTTP Server (modules and other binary files) apache2-data - Apache HTTP Server (common files) apache2-dbg - Apache debugging symbols apache2-dev - Apache HTTP Server (development headers) apache2-doc - Apache HTTP Server (on-site documentation) apache2-mpm-event - transitional event MPM package for apache2 apache2-mpm-itk - transitional itk MPM package for apache2 apache2-mpm-prefork - transitional prefork MPM package for apache2 apache2-mpm-worker - transitional worker MPM package for apache2 apache2-suexec - transitional package for apache2-suexec-pristine apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec apache2-utils - Apache HTTP Server (utility programs for web servers) apache2.2-bin - Transitional package for apache2-bin apache2.2-common - Transitional package for apache2 libapache2-mod-macro - Transitional package for apache2-bin libapache2-mod-proxy-html - Transitional package for apache2-bin Closes: 765347 765500 Changes: apache2 (2.4.10-6) unstable; urgency=medium . * Disable SSLv3 in default config. Closes: #765347 * Pull changes from upstream 2.4.x branch up to r1632831 - Fixes an LDAP regression in 2.4.10 - mod_cache: Avoid sending 304 responses during failed revalidations. PR 56881 - mod_status: Honor client IP address using mod_remoteip. PR 55886 * Fix typo in package description. Closes: #765500 Checksums-Sha1: 7f1a8f620e4ae22c5ccb42ec70a632d57344616e 3218 apache2_2.4.10-6.dsc dc27f0b6597a9fda0dd766eab7a39f5aca9c7ba6 521148 apache2_2.4.10-6.debian.tar.xz b98b781d25b2e570bfa6116a16efbb465dba0684 1504 libapache2-mod-proxy-html_2.4.10-6_amd64.deb 877f9a8b84919c3b5395fd762f018d00d4d84ca3 1492 libapache2-mod-macro_2.4.10-6_amd64.deb 3b859724c6772bc0f98be7361d231beaa1060e57 203632 apache2_2.4.10-6_amd64.deb 87de7afb130a32d85a2587c1773a0ea4d5f66ca3 162464 apache2-data_2.4.10-6_all.deb 0ce60447439d88b8c96b5fe2bf54db028b757404 1029164 apache2-bin_2.4.10-6_amd64.deb 6eeee50faee5c1a43a2506a2f0a972229c9e683d 1506 apache2-mpm-worker_2.4.10-6_amd64.deb cc9636b27748ad9661e98897155eb921ef142a74 1508 apache2-mpm-prefork_2.4.10-6_amd64.deb 93648a0c4eb49c0bf3aff8a9a77592e362da42da 1512 apache2-mpm-event_2.4.10-6_amd64.deb 0ddc761ca0472575648f6c2dd596554a391d0de5 1508 apache2-mpm-itk_2.4.10-6_amd64.deb d003352e941d86b4b5040931ade1283574e5d35f 1522 apache2.2-bin_2.4.10-6_amd64.deb 24e746e25fc3096e7c3bf1b1fb72ab97c96acc13 122576 apache2.2-common_2.4.10-6_amd64.deb 03110349fc3a7e39ad2a78e6a30fcea97c5b41a5 193398 apache2-utils_2.4.10-6_amd64.deb 759fe378d2ea9d272948f32c91b739fc8f55a3e7 1482 apache2-suexec_2.4.10-6_amd64.deb 8670d3ec8e664eab2ec8b81a920dd14d0b74e3c9 128256 apache2-suexec-pristine_2.4.10-6_amd64.deb 26165ffd5c934e86591d8f3dda8e3bf185bae8eb 129782 apache2-suexec-custom_2.4.10-6_amd64.deb ec583da453251c2a4dfb21a03ce11be6467e9256 2724312 apache2-doc_2.4.10-6_all.deb 04d89ddd202faabc6b39cc1b84902f3a1e017817 279370 apache2-dev_2.4.10-6_amd64.deb 28d7a2245f98927ddbe4aa45e669dc66ddd51319 1703720 apache2-dbg_2.4.10-6_amd64.deb Checksums-Sha256: bc2feeed3708630adc1ad31d511c4268b7773074fb42326d02783beefd9d8890 3218 apache2_2.4.10-6.dsc a77f8e9c3687b2c626e615c541b53b47f26567d997928a37e9040a8bc360df1e 521148 apache2_2.4.10-6.debian.tar.xz c97e13ff895e4cddf498d6d3ef981a6b7e8658dd4ef84f0013eaa633db5ccfdf 1504 libapache2-mod-proxy-html_2.4.10-6_amd64.deb 964105230788ff2f9a246a674860ed2164c0e44023efddc8082a49f6574e8edd 1492 libapache2-mod-macro_2.4.10-6_amd64.deb 9842abc457f7fe9fd3bb7ca71f8c58646141f6c0a449f4a58e61ea602e782d35 203632 apache2_2.4.10-6_amd64.deb de5aac37502595332fe8d83e9309b2417f78d741e4678370af92527cee0bb8b8 162464 apache2-data_2.4.10-6_all.deb 50418c48d1a40feb938558e7924e4e7f52f5ec40348b8c161f4e536e07d30b20 1029164 apache2-bin_2.4.10-6_amd64.deb a2a4df4ad5b744fd0d0c518b7aa8165bdfd6ad6f4f233f3fe74b94ba71ce6a82 1506 apache2-mpm-worker_2.4.10-6_amd64.deb 3ad23b205a68c533b6530c7d874168bbb2dfe95daaacbd77410fb121c965a0ab 1508 apache2-mpm-prefork_2.4.10-6_amd64.deb 8dc8f3f0bb260ac1e92dca80b915bbdd8e26da15e894c0c3cc383d7dbbf54c11 1512 apache2-mpm-event_2.4.10-6_amd64.deb ca6f677d9a356f2cce6fa22e52b6188ed601fb940508eb660817a59db9b3f1c1 1508 apache2-mpm-itk_2.4.10-6_amd64.deb aa3706a75d9147715e8e6021c827d9af8cf39107650e965947601a72e0efbdd6 1522 apache2.2-bin_2.4.10-6_amd64.deb 4f8de6633da3f2dbe1cf30feb7c3ef773dbd638187c3b31002bf822a15f2c05c 122576 apache2.2-common_2.4.10-6_amd64.deb 3abc426a45438a35cdfb4f025c3de04e6dc731298fe5f37674ab4abb44b897a4 193398 apache2-utils_2.4.10-6_amd64.deb d568b5e8b4f8ad80af2bb09ff9a64b7091660234a385990f930a17c042706bc4 1482 apache2-suexec_2.4.10-6_amd64.deb 05aa4a62bed0ef54aadfb01c840cb84f6c1fb5d5a94510f31a981850ced60ce1 128256 apache2-suexec-pristine_2.4.10-6_amd64.deb 826ddc21f72b4a598a61dd0828d46dff6d64e5a976c7ee4ec96637222ebe1a49 129782 apache2-suexec-custom_2.4.10-6_amd64.deb 14f7cd790fc5aca93ab30eff196e7f2913e0048f198939f41283a5f1dc171168 2724312 apache2-doc_2.4.10-6_all.deb fdfa6c1ee8a0b55756927f898575329e8e00b568eac081b6d509b285035bd373 279370 apache2-dev_2.4.10-6_amd64.deb e430f88b016c8690e96fd880592a0b90694237b11e91fc34f8810c5d099efcc7 1703720 apache2-dbg_2.4.10-6_amd64.deb Files: 58291cba66cc7b69911c1ac3657ab734 3218 httpd optional apache2_2.4.10-6.dsc bde993dccda73fc9310e2585383dcfc5 521148 httpd optional apache2_2.4.10-6.debian.tar.xz 2c4bb9fbc1fc5946856461f226c294e1 1504 oldlibs extra libapache2-mod-proxy-html_2.4.10-6_amd64.deb 54030bce9fe8701c49150573f2fc8ca7 1492 oldlibs extra libapache2-mod-macro_2.4.10-6_amd64.deb 4afcc4ccb24be14cea2c706abefec454 203632 httpd optional apache2_2.4.10-6_amd64.deb 1bb60ecd4eeda91fb4f0ed434b840038 162464 httpd optional apache2-data_2.4.10-6_all.deb 40ab462498f33446de37d3e6a8d95b12 1029164 httpd optional apache2-bin_2.4.10-6_amd64.deb 39d63dfc7548af023fd6223f58707c27 1506 oldlibs extra apache2-mpm-worker_2.4.10-6_amd64.deb 9d6d0f1e49b51a3119c01a70146e5c03 1508 oldlibs extra apache2-mpm-prefork_2.4.10-6_amd64.deb ddd6ba008d21466ab1259bd489b088f4 1512 oldlibs extra apache2-mpm-event_2.4.10-6_amd64.deb c4bd5c432ddc7522c7c88d43d1398eff 1508 oldlibs extra apache2-mpm-itk_2.4.10-6_amd64.deb 1bc76ece18193b1f6374605face32eb4 1522 oldlibs extra apache2.2-bin_2.4.10-6_amd64.deb f74b47811ae72ee9ba5f1eb8e42f4340 122576 oldlibs extra apache2.2-common_2.4.10-6_amd64.deb 57bda4dfb7d3fffdf381d0dca7623a47 193398 httpd optional apache2-utils_2.4.10-6_amd64.deb 908aacd03ff4fc5cbf697e1074a0d26f 1482 oldlibs extra apache2-suexec_2.4.10-6_amd64.deb 4f6d9eb0299a3824ae3b0b6848cf873e 128256 httpd optional apache2-suexec-pristine_2.4.10-6_amd64.deb 0a08ff562873c5607a3fd49afc7142bf 129782 httpd extra apache2-suexec-custom_2.4.10-6_amd64.deb 15205167c2fc4a62e8526f205005c351 2724312 doc optional apache2-doc_2.4.10-6_all.deb 1fb9742d7e47522009fb24a5750753a1 279370 httpd optional apache2-dev_2.4.10-6_amd64.deb 5545e1820c1bc31bb26454bc20b8ed5d 1703720 debug extra apache2-dbg_2.4.10-6_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBVEbHcsaHXzVBzv3gAQgWLg/9ENPX+8zonP1uvsBpWZHJFEKYBT9oqKQG gjRJ13OOAmfHCwHVdQABJq9mZym5P+n44OQIzdGweg1ERAVfqo2U+VCPqjb6QcwI l0/UbNMy/yKOi6K1m+uHcXQZFV3UFCh9qbaBhBTpp+mpetFTpXerRxukPXpOXk/X YmItZGSw56yO0GE/DxnCeREId7kpXTPP8RB3KH4uCGmFYeG2Bla5fwLy+7ZLlenI ReLsOVbnrvxNSkAZTonJDKJwN4IdeJeQs/gnyp2jqKd3B7CfJe/KYTqD9t8CYQUL x+Y7grhX1D9haj3JPqTta9MNWWbRlD98/nL66462YaCJcCm/ziV7ws25mcFu1cjO td288w6Y659FBK+wyYMtiwSv/TKFaB3FiA3SfpxPAPuehJD3DKbt1K3h5/8nDw/N qCrU46bGAsGvRhA3Np8h+eUmeRuNIBuKkNEQuIHajAVI77Bb2caGPJzLMJXHjIqA koXp6JJcKu+fn71zNx9NoZiFOGwSn/+ZNOC5pUiUCQv6Yyg6KTXTKclthMFVLTlv Nmeb6OTE0XNcLlgJnNv4BE3FiYb4UvcUsuQep/pekD7K6oi9RRwKme/AGJ10pw8O sw/O0He5lq899PZ8B8MAFNIyFjWEmRVZWvqHAG6dPbsFom6u56nSfHsKO70Mx6RL 9bKqdluzbu8= =vyRb -----END PGP SIGNATURE-----
--- End Message ---

