Package: apache2
Version: 2.4.68-1~deb13u3
Severity: important
X-Debbugs-Cc: [email protected]
Dear Debian Apache Maintainers,
apache2 fill error.log with segmentation fault:
[Wed Oct 07 20:20:44.345117 2026] [core:notice] [pid 4052295:tid 4052295]
AH00052: child pid 4080390 exit signal Segmentation fault (11)
[Wed Oct 07 20:20:47.348867 2026] [core:notice] [pid 4052295:tid 4052295]
AH00052: child pid 4080554 exit signal Segmentation fault (11)
[Wed Oct 07 20:20:49.351486 2026] [core:notice] [pid 4052295:tid 4052295]
AH00052: child pid 4080595 exit signal Segmentation fault (11)
[Wed Oct 07 20:20:54.357104 2026] [core:notice] [pid 4052295:tid 4052295]
AH00052: child pid 4080626 exit signal Segmentation fault (11)
[Wed Oct 07 20:20:57.361220 2026] [core:notice] [pid 4052295:tid 4052295]
AH00052: child pid 4080518 exit signal Segmentation fault (11)
[Wed Oct 07 20:20:58.363050 2026] [core:notice] [pid 4052295:tid 4052295]
AH00052: child pid 4080691 exit signal Segmentation fault (11)
etc.
I use ProxyPass to forward to gitit (see the Debian package 'gitit') and it
seems
if I stop gitit itself, there is no segmentation fault anymore.
In fact it seems accessing the proxied gitit triggers the segv.
I downgraded to 2.4.67-1~deb13u3 and so far there is no segmentation fault
whatever I do.
Cheers,
Bill
-- Package-specific info:
-- System Information:
Debian Release: 13.7
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500,
'stable-debug'), (500, 'proposed-updates-debug'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 6.12.111+deb13-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages apache2 depends on:
ii apache2-bin 2.4.67-1~deb13u3
ii apache2-data 2.4.67-1~deb13u3
ii apache2-utils 2.4.67-1~deb13u3
ii init-system-helpers 1.69~deb13u1
ii media-types 13.0.0
ii perl 5.40.1-6+deb13u1
ii procps 2:4.0.4-9
Versions of packages apache2 recommends:
pn ssl-cert <none>
Versions of packages apache2 suggests:
pn apache2-doc <none>
pn apache2-suexec-pristine | apache2-suexec-custom <none>
ii lynx [www-browser] 2.9.2-1
pn ufw <none>
Versions of packages apache2-bin depends on:
ii libapr1t64 1.7.5-1
ii libaprutil1-dbd-sqlite3 1.6.3-3+deb13u1
ii libaprutil1-ldap 1.6.3-3+deb13u1
ii libaprutil1t64 1.6.3-3+deb13u1
ii libbrotli1 1.1.0-2+b7
ii libc6 2.41-12+deb13u4
ii libcrypt1 1:4.4.38-1
ii libcurl4t64 8.14.1-2+deb13u5
ii libjansson4 2.14-2+b3
ii libldap2 2.6.10+dfsg-1
ii liblua5.4-0 5.4.7-1+b2
ii libnghttp2-14 1.64.0-1.1+deb13u1
ii libpcre2-8-0 10.46-1~deb13u3
ii libssl3t64 3.5.7-1~deb13u3
ii libxml2 2.12.7+dfsg+really2.9.14-2.1+deb13u3
ii perl 5.40.1-6+deb13u1
ii zlib1g 1:1.3.dfsg+really1.3.1-1+b1
Versions of packages apache2-bin suggests:
pn apache2-doc <none>
pn apache2-suexec-pristine | apache2-suexec-custom <none>
ii lynx [www-browser] 2.9.2-1
Versions of packages apache2 is related to:
ii apache2 2.4.67-1~deb13u3
ii apache2-bin 2.4.67-1~deb13u3
-- Configuration Files:
/etc/apache2/sites-available/000-default.conf changed:
<VirtualHost *:80>
Include /etc/apache2/sites-available/pari.conf
</VirtualHost>
/etc/apache2/sites-available/default-ssl.conf changed:
<VirtualHost *:443>
ServerAdmin webmaster@localhost
DocumentRoot /var/www/html
# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
# error, crit, alert, emerg.
# It is also possible to configure the loglevel for particular
# modules, e.g.
#LogLevel info ssl:warn
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
# For most configuration files from conf-available/, which are
# enabled or disabled at a global level, it is possible to
# include a line for only one particular virtual host. For example the
# following line enables the CGI configuration for this host only
# after it has been globally disabled with "a2disconf".
#Include conf-available/serve-cgi-bin.conf
# SSL Engine Switch:
# Enable/Disable SSL for this virtual host.
SSLEngine on
# the ssl-cert package. See
# /usr/share/doc/apache2/README.Debian.gz for more info.
# If both key and certificate are stored in the same file, only the
# SSLCertificateFile directive is needed.
SSLCertificateFile /etc/ssl/private/pari_math_u-bordeaux_fr.crt
SSLCertificateKeyFile /etc/ssl/private/pari.math.u-bordeaux.fr.key
SSLCertificateChainFile
/etc/ssl/private/pari_math_u-bordeaux_fr_interm.cer
# Server Certificate Chain:
# Point SSLCertificateChainFile at a file containing the
# concatenation of PEM encoded CA certificates which form the
# certificate chain for the server certificate. Alternatively
# the referenced file can be the same as SSLCertificateFile
# when the CA certificates are directly appended to the server
# certificate for convinience.
#SSLCertificateChainFile /etc/apache2/ssl.crt/server-ca.crt
# Certificate Authority (CA):
# Set the CA certificate verification path where to find CA
# certificates for client authentication or alternatively one
# huge file containing all of them (file must be PEM encoded)
# Note: Inside SSLCACertificatePath you need hash symlinks
# to point to the certificate files. Use the provided
# Makefile to update the hash symlinks after changes.
#SSLCACertificatePath /etc/ssl/certs/
#SSLCACertificateFile /etc/apache2/ssl.crt/ca-bundle.crt
# Certificate Revocation Lists (CRL):
# Set the CA revocation path where to find CA CRLs for client
# authentication or alternatively one huge file containing all
# of them (file must be PEM encoded)
# Note: Inside SSLCARevocationPath you need hash symlinks
# to point to the certificate files. Use the provided
# Makefile to update the hash symlinks after changes.
#SSLCARevocationPath /etc/apache2/ssl.crl/
#SSLCARevocationFile /etc/apache2/ssl.crl/ca-bundle.crl
# Client Authentication (Type):
# Client certificate verification type and depth. Types are
# none, optional, require and optional_no_ca. Depth is a
# number which specifies how deeply to verify the certificate
# issuer chain before deciding the certificate is not valid.
#SSLVerifyClient require
#SSLVerifyDepth 10
# SSL Engine Options:
# Set various options for the SSL engine.
# o FakeBasicAuth:
# Translate the client X.509 into a Basic Authorisation. This means
that
# the standard Auth/DBMAuth methods can be used for access control.
The
# user name is the `one line' version of the client's X.509
certificate.
# Note that no password is obtained from the user. Every entry in
the user
# file needs this password: `xxj31ZMTZzkVA'.
# o ExportCertData:
# This exports two additional environment variables: SSL_CLIENT_CERT
and
# SSL_SERVER_CERT. These contain the PEM-encoded certificates of the
# server (always existing) and the client (only existing when client
# authentication is used). This can be used to import the
certificates
# into CGI scripts.
# o StdEnvVars:
# This exports the standard SSL/TLS related `SSL_*' environment
variables.
# Per default this exportation is switched off for performance
reasons,
# because the extraction step is an expensive operation and is
usually
# useless for serving static content. So one usually enables the
# exportation for CGI and SSI requests only.
# o OptRenegotiate:
# This enables optimized SSL connection renegotiation handling when
SSL
# directives are used in per-directory context.
#SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
<FilesMatch "\.(?:cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory /usr/lib/cgi-bin>
SSLOptions +StdEnvVars
</Directory>
Include /etc/apache2/sites-available/pari.conf
</VirtualHost>
-- no debconf information
DocumentRoot /home/www
AddType application/wasm .wasm
AddType text/plain .gp
<Directory />
Options FollowSymLinks
AllowOverride None
DirectoryIndex index
</Directory>
<Directory /home/www/>
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
Allow from all
Require all granted
</Directory>
<Directory /home/git/>
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
Allow from all
Require all granted
</Directory>
<Directory /usr/lib/git-core/>
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
Allow from all
Require all granted
</Directory>
<Directory "/home/www/buildlogs/">
AddDefaultCharset utf-8
DefaultType text/plain
</Directory>
ScriptAlias /cgi-bin/ /home/www/cgi-bin/
<Directory "/home/www/cgi-bin/">
AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all
</Directory>
ErrorLog /var/log/apache2/error.log
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn
CustomLog /var/log/apache2/access.log combined
Alias /doc/ "/usr/share/doc/"
<Directory "/usr/share/doc/">
Options Indexes MultiViews FollowSymLinks
AllowOverride None
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128
</Directory>
AddCharset UTF-8 .txt
RewriteMap gphelp "txt:/home/www/dochtml/html/ModRewrite-table"
RewriteMap gphelp-stable "txt:/home/www/dochtml/html-stable/ModRewrite-table"
RewriteEngine on
RewriteRule ^/Bugs/index /Bugs/index.html [L]
RewriteRule ^/Bugs/([0-9]+)$ /cgi-bin/bugreport.cgi?bug=$1 [R]
RewriteRule ^/Bugs/mbox:([0-9]+)$ /cgi-bin/bugreport.cgi?mbox=yes&bug=$1 [R]
RewriteRule ^/Bugs/([a-z][-a-z0-9]*)$ /cgi-bin/pkgreport.cgi?pkg=$1 [R]
RewriteRule "^/dochtml/help/(.*)$" /dochtml/html/${gphelp:$1} [NE,R]
RewriteRule "^/dochtml/help-stable/(.*)$"
/dochtml/html-stable/${gphelp-stable:$1} [NE,R]
SetEnv GIT_PROJECT_ROOT /home/www/git
SetEnv GIT_HTTP_EXPORT_ALL 1
ScriptAliasMatch \
"(?x)^/git/(.*/(HEAD | \
info/refs | \
objects/(info/[^/]+ | \
[0-9a-f]{2}/[0-9a-f]{38} | \
pack/pack-[0-9a-f]{40}\.(pack|idx)) | \
git-(upload|receive)-pack))$" \
/usr/lib/git-core/git-http-backend/$1
ProxyRequests Off
<Proxy *>
Order deny,allow
Allow from all
</Proxy>
ProxyPass /wiki/ http://127.0.0.1:5001/
<Location /wiki/>
SetOutputFilter proxy-html
ProxyPassReverse /
ProxyHTMLURLMap / /wiki/
ProxyHTMLDocType "<!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Strict//EN'
'http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd'>" XHTML
RequestHeader unset Accept-Encoding
</Location>
