Bug#920220: apache2: CVE-2019-0190: mod_ssl 2.4.37 remote DoS when used with OpenSSL 1.1.1

2019-01-23 Thread Xavier
Hello, Debian bug is tagged as "patch", but I didn't find any patch in the related documents. Can you give me the link to patch ? Cheers, Xavier Le 22/01/2019 à 21:18, Salvatore Bonaccorso a écrit : > Source: apache2 > Version: 2.4.37-1 > Severity: grave > Tags: patch sec

Bug#920220: apache2: CVE-2019-0190: mod_ssl 2.4.37 remote DoS when used with OpenSSL 1.1.1

2019-01-23 Thread Xavier
Le 23/01/2019 à 21:50, Salvatore Bonaccorso a écrit : > Hi Xavier, > > On Wed, Jan 23, 2019 at 09:46:44PM +0100, Xavier wrote: >> Le 23/01/2019 à 20:57, Salvatore Bonaccorso a écrit : >>> Control: tags -1 + fixed-upstream >>> Control: tags -1 - patch >>

Bug#916375: Fwd: Bug#916375: apache2: Segmentation fault when mod_perl.so is loaded

2018-12-13 Thread Xavier
Cc: libapache2-mod-perl2 Message Subject : Bug#916375: apache2: Segmentation fault when mod_perl.so is loaded Date : Thu, 13 Dec 2018 19:09:02 + >From : h.thien To : debian-bugs-d...@lists.debian.org Cc : t...@security.debian.org, Debian Apache Maintainers Package:

Bug#880993: Test report with new http2.conf file

2018-11-30 Thread Xavier
Le 30/11/2018 à 14:58, Cyr Bol a écrit : > So, I tested the new http2.conf file added by Xavier in commit e46a27465 > > It's working, but, the problem is that apache automatically de-activates > the http2 module when using mpm_prefork (which is the default mpm module > shippe

Apache 2.4.29 in buster ?

2019-04-02 Thread Xavier
Hi all, New Apache 2.4.39 fixes many bugs, do you think it is a good idea to propose an update to release.debian.org ? Cheers, Xavier http://www.apache.org/dist/httpd/CHANGES_2.4.39

Apache 2.4.39 in Buster ?

2019-04-02 Thread Xavier
uploading to unstable. Cheers, Xavier [1]: http://www.apache.org/dist/httpd/CHANGES_2.4.39

Bug#926432: apache2: Internal error: error fetching from cache 'dbm:/var/cache/apache2/gnutls_cache'

2019-04-04 Thread Xavier
2730752] (20014)Internal error (specific > information not available): error fetching from cache > 'dbm:/var/cache/apache2/gnutls_cache' > > One string per virtual host, every 10 minutes. Hello, could you try with apache-2.4.39 (https://people.debian.org/~yadd/apache/) ? It seems that this has been fixed. Cheers, Xavier

Bug#918014: apache2: Segfault in mod_filter only wehen started by systemd

2019-01-30 Thread Xavier
Hello Dominik, did you check if it works now after libpcap-ng release ? Cheers, Xavier

Bug#921024: apache2: DEP8 failure with 2.4.38-1: allowmethods.t

2019-02-04 Thread Xavier
ules/allowmethods.t one could avoid the > redirect done by mod_directory. > > I don't have time right now to try any of these. Maybe in the next few days. > If somebody else has time, go ahead. > > Cheers, > Stefan > > [1] https://svn.apache.org/repos/asf/httpd/test/framework/trunk Thanks Stefan, I didn't succeed to get the same autopkgtest results here using autopkgtest LXC. Do you know how to reproduce debci environment ? I updated also test framework environment (not yet pushed). Cheers, Xavier

Bug#934640: apache2: fails to install, a2enconf missing

2019-08-12 Thread Xavier
ian/* during build unecessarily and makes finding errors/debugging > build things a tad more ugly. > > > Therefore, please consider using override_dh_link_indep and pass '-i' > again to dh_link, like my original patch: Hi, when using "override_dh_link_indep", jdupes is launched before apache2-doc is built, then nothing is cleaned in apache2-doc. That's why I modified your patch Cheers, Xavier

Bug#934640: apache2: fails to install, a2enconf missing

2019-08-12 Thread Xavier
Le 12/08/2019 à 22:33, Daniel Baumann a écrit : > Package: apache2 > Version: 2.4.39-1 > Severity: serious > > Hi, > > thank you for uploading the new apache version, however, the package > fails to install: > > ---snip--- > [...] > Enabling module env. > Enabling module mime. > Enabling module

Bug#910368: apache2: Apache does not start reliably after reboot

2019-08-22 Thread Xavier
Le 22/08/2019 à 17:57, Xavier a écrit : > Le 22/08/2019 à 17:38, Marc Dequènes (duck) a écrit : >> Quack, >> >> I also hit this problem recently on Buster. I also do have specific >> Listen directives on this machine but all my IPs (4 and 6) are >> statically d

Bug#876636: marked as done (apache2: insserv noise)

2019-10-01 Thread Xavier
Le 01/10/2019 à 22:21, Debian Bug Tracking System a écrit : > Your message dated Tue, 1 Oct 2019 22:19:28 +0200 > with message-id > > and subject line Re: apache2: insserv noise > has caused the Debian Bug report #876636, > regarding apache2: insserv noise > to be marked as done. > > This means

Bug#941202:

2019-10-15 Thread Xavier
Le 11/10/2019 à 10:35, Daniel Cadden a écrit : > Thank you. > Will this be fixed for Stretch? Yes, see https://lists.debian.org/debian-security-announce/2019/msg00195.html

Re: Apache suddenly downloads PHP instead of executing it ... but only on one virtual site?

2019-10-29 Thread Xavier
Le 29/10/2019 à 04:21, Carl Fink a écrit : > Hi, Apache experts. > > My server supports several virtual hosts (rwhutter.com, finknetwork.com, > learnhere.info) that use PHP. Two are running WordPress. Under > finknetwork.com is a Tiny Tiny RSS (www.tt-rss.org) installation at >

Bug#910368: Fixed ?

2020-03-26 Thread Xavier
Control: tags -1 + moreinfo Hi, I fixed service files some releases ago, is it fixed now ?

Bug#940838: apache2: does not serve compressed svg (.svgz) by default

2020-03-26 Thread Xavier
Le 20/09/2019 à 18:33, Francesco Potortì a écrit : > Package: apache2 > Version: 2.4.41-1 > Severity: minor > > In order for Apache to correctly serve .svgz files one must add this > > # Manage svgz > AddType image/svg+xml svg svgz > AddEncoding gzip svgz > > I think these two lines should be

Re: apache upgrade from upstream to accept attribute secret for ajp

2020-05-10 Thread Xavier
etch and buster are updated only to fix security issues and some major bugs. But you can use backports Cheers, Xavier

Re: apache upgrade from upstream to accept attribute secret for ajp

2020-05-10 Thread Xavier
gt;new update from upstream to stretch and it broke all our reverse proxy using >ajp and i was trying to set this new secret at apache but with no luck its >harder to plan for vm upgrade for our stretch stack. > >Sent from my iPhone > >> On 10 May 2020, at 6:18 PM, Xavie

Re: apache upgrade from upstream to accept attribute secret for ajp

2020-05-10 Thread Xavier
Le 10/05/2020 à 20:11, Mohammed Alnajdi a écrit : > By the way Xavier, this was my first time using Debian mailing list so i > am sorry if i didn’t follow any guidelines. I was just confused with > this and I couldn’t find any related articles or tracks. We have > automated deplo

Fwd: apache2_2.4.43-1~bpo9+1_amd64.changes is NEW

2020-05-10 Thread Xavier
Hi, let's wait for release team review Message transféré Sujet : apache2_2.4.43-1~bpo9+1_amd64.changes is NEW Date : Sun, 10 May 2020 20:20:12 + De : Debian FTP Masters Pour : Xavier Guimard , Debian Apache Maintainers binary:apache2 is NEW. binary:apache2-bin is NEW

Bug#980388: apache2: please consider enabling http2 by default

2021-01-18 Thread Xavier
t; > Thanks. Hi, there were a lot of issues in this module in the 3 last versions, I propose to differ this change after Bullseye release to minimize potential security problems. Cheers, Xavier

Bug#743915: apache2: wrong DOCUMENT_LOCATION in fhs_compliance.patch in apache2_2.4.9-1.debian.tar.xz source package

2014-04-08 Thread xavier brochard
/fhs_compliance.patch (see #define DOCUMENT_LOCATION /var/www). On some cases this result in apache ignoring default config file and using DOCUMENT_LOCATION as DOCUMENT_ROOT Another minor bug is that the index.html default file is located in /var/www instead of /var/www/html Regards Xavier

Bug#892806: AH00169: caught SIGTERM, shutting down

2018-03-13 Thread Xavier Bestel
Package: apache2 Version: 2.4.25-3+deb9u3 Severity: normal Hi, Sometimes apache2 stops, having been TERMinated by some other process apparently (systemd ?). journalctl -u apache2: [...] mars 12 13:41:09 kawa systemd[1]: Starting The Apache HTTP Server... mars 12 13:41:09 kawa systemd[1]:

Bug#892806: Acknowledgement (AH00169: caught SIGTERM, shutting down)

2018-03-13 Thread Xavier Bestel
The issue was with certbot stopping apache for certs renewal, failing, and not restarting apache afterwards: mars 13 12:02:15 kawa systemd[1]: Stopping The Apache HTTP Server... mars 13 12:02:15 kawa systemd[1]: Stopped The Apache HTTP Server. mars 13 12:02:26 kawa certbot[6014]: Attempting to

Bug#942143: buster-pu: package apache2/2.4.38-3+deb10u2

2019-10-10 Thread Xavier Guimard
=1865748=1865749) Cheers, Xavier