Bug#1071596: apache2: envvars evaluates string in conditional instead of testing for empty string

2024-05-22 Thread Stefan Fritsch
Hi Mark, Am 21.05.24 um 22:30 schrieb Mark Hedges: Package: apache2 Version: 2.4.59-1~deb12u1 Severity: normal Dear Maintainer, `envvars` evaluates string in conditional instead of testing for empty string. `apachectl` calls `envvars` which shows a syntax error despite working:

Bug#1067104: server stalls: AH00046: child process 2876749 still did not exit, sending a SIGKILL

2024-03-21 Thread Stefan Fritsch
Am 18.03.24 um 13:59 schrieb Yaroslav Halchenko: Package: apache2 Version: 2.4.57-2 Severity: important Server was working just fine for years and recently started to stall completely after 3-7 days of functioning normally. error logs get filled up first with AH03490 and then eventually with

Bug#1067120: nmu: apache2_2.4.58-1

2024-03-18 Thread Stefan Fritsch
Package: release.debian.org Severity: normal X-Debbugs-Cc: apac...@packages.debian.org Control: affects -1 + src:apache2 User: release.debian@packages.debian.org Usertags: binnmu libaprutil1t64 1.6.3-1.1 contains a wrong symbol file, causing a wrong dependency on libaprutil164 (missing a "t")

Bug#1066821: apr-util: FTBFS on arm{el,hf}: /bin/bash: line 3: 3132384 Segmentation fault LD_LIBRARY_PATH="`echo "../crypto/.libs:../dbm/.libs:../dbd/.libs:../ldap/.libs:$LD_LIBRARY_PATH" | sed -e 's/

2024-03-18 Thread Stefan Fritsch
Am 18.03.24 um 19:30 schrieb Stefan Fritsch: Am 13.03.24 um 22:32 schrieb Sebastian Ramacher: Source: apr-util Version: 1.6.3-1.1 Severity: serious Tags: ftbfs Justification: fails to build from source (but built successfully in the past) X-Debbugs-Cc: sramac...@debian.org https

Bug#1066821: apr-util: FTBFS on arm{el,hf}: /bin/bash: line 3: 3132384 Segmentation fault LD_LIBRARY_PATH="`echo "../crypto/.libs:../dbm/.libs:../dbd/.libs:../ldap/.libs:$LD_LIBRARY_PATH" | sed -e 's/

2024-03-18 Thread Stefan Fritsch
Am 13.03.24 um 22:32 schrieb Sebastian Ramacher: Source: apr-util Version: 1.6.3-1.1 Severity: serious Tags: ftbfs Justification: fails to build from source (but built successfully in the past) X-Debbugs-Cc: sramac...@debian.org

Bug#1057126: "AH03490: scoreboard is full" after nightly maintenance

2023-12-12 Thread Stefan Fritsch
Hi, Am 30.11.23 um 09:05 schrieb Peter Krefting: we are experiencing that the Apache httpd locks up, filling the error.log with errors after the nightly maintenance (not every night, though):   [Wed Nov 29 00:00:01.922731 2023] [mpm_event:notice] [pid 62346:tid 139841215223680] AH00489:

Bug#1031034: apr: Missing LFS support triggers FTBFS on other packages

2023-06-20 Thread Stefan Fritsch
It seems a large transition will be needed for 64bit time_t, anyway. And glibc enforces _FILE_OFFSET_BITS=64 if _TIME_BITS=64 is set. apr should do both transitions at the same time. It seems there won't be a transition for i386 but the whole point of i386 is running old binaries.

Bug#1031034: apr: Missing LFS support triggers FTBFS on other packages

2023-02-12 Thread Stefan Fritsch
Hi Helge, Am 10.02.23 um 17:24 schrieb Helge Deller: On 32-bit platforms it's necessary to compile programs and libraries with Large File Support (LFS) in order to allow them to function correctly on filesystems with > 2GB or 4GB size. This can be solved by adding "-D_LARGEFILE_SOURCE

Bug#987013: Release goal proposal: Remove Berkeley DB

2023-02-03 Thread Stefan Fritsch
Apache httpd allows to use DBM file for various purposes. The default format is Berkeley DB. This is highly configuration dependent, automatic migration by maintainer scripts seems unfeasible. This means that the users need time and a tool to migrate their configurations. I have opened [1] for

Bug#1030376: apache2: Deal with future removal of berkeley DB

2023-02-03 Thread Stefan Fritsch
Package: apache2 Version: 2.4.55-1 Severity: important It seems db5.3 will go away sooner or later [1], probably after the bookworm release. Apache httpd supports using auth/authz data from DBM files with mod_authn_dbm/mod_authz_dbm [2,3] and in a bunch of other places, at least mod_authn_socache

Bug#1017868: ssl-cert: Needless bash dependency

2022-09-19 Thread Stefan Fritsch
Hi, Am 21.08.22 um 21:59 schrieb наб: The installed make-ssl-cert depends on bash, but doesn't really need to. I am sorry, but I don't see any advantage here in switching away from bash. The performance advantage of dash over bash is completely irrelevant in make-ssl-cert, and bash is

Bug#1010576: akonadi cannot kill mysql due to apparmor rules

2022-06-16 Thread Stefan Fritsch
Hi, I have the problem that after suspend/resume, if I shut down the system, systemd complains that mysql does not die. I have wondered, why akonadi does not kill mysql and it is because of akonadi's apparmor rules: Jun 16 11:24:45 k kernel: [ 4096.077336] audit: type=1400

Bug#1000681: linux-image-5.15.0-1-amd64: 5.15 upgrade causes all apps to flicker

2022-01-08 Thread Stefan Fritsch
On 09.12.21 23:14, Stefan Fritsch wrote: There is discussion and a fix for this issue at https://lists.freedesktop.org/archives/nouveau/2021-December/039597.html https://lists.freedesktop.org/archives/nouveau/2021-December/039609.html The fix is in 5.15.13

Bug#1000681: linux-image-5.15.0-1-amd64: 5.15 upgrade causes all apps to flicker

2021-12-09 Thread Stefan Fritsch
There is discussion and a fix for this issue at https://lists.freedesktop.org/archives/nouveau/2021-December/039597.html https://lists.freedesktop.org/archives/nouveau/2021-December/039609.html

Bug#988310: ssl-cert: make-ssl-cert uses same filename for template and output

2021-06-06 Thread Stefan Fritsch
I won't be able to deal with this for at least 1-2 weeks. It would be nice if someone could look at it and downgrade or NMU+unblock. Am 06.06.21 um 13:14 schrieb Stefan Bühler: Hi, On Mon, 10 May 2021 11:09:58 +0200 Parodper wrote: Package: ssl-cert Version: 1.1.0 Severity: grave Tags:

Bug#987156: mod_ssl depends on mod_setenvif while it does not

2021-04-19 Thread Stefan Fritsch
Am 18.04.21 um 17:10 schrieb MichaIng: Hence I believe that this module dependency might come from some previous use of setenvif directives in the default mod_ssl config, which have been removed meanwhile, rendering this dependency as obsolete. I'm not sure how those dependencies are defined

Bug#978045: apache2-bin: Immediate exit with "AH00141: Could not initialize random number generator"

2020-12-27 Thread Stefan Fritsch
Am 27.12.20 um 12:24 schrieb David W: I think a perfectly valid fix would be to document (in the changelog or elsewhere) that this hard requirement was added, in particular because (IIUC) using getrandom() instead of one of the other codepaths is the choice of the package maintainer. (I.e.

Bug#978045: apache2-bin: Immediate exit with "AH00141: Could not initialize random number generator"

2020-12-26 Thread Stefan Fritsch
reassign 978045 libapr1 found 978045 1.7.0-1 thanks Am 25.12.20 um 03:18 schrieb David W: You can see that the associated call/failure is happening inside APR here, on line 216: https://svn.apache.org/viewvc/apr/apr/trunk/misc/unix/rand.c?revision=1832691=markup#l216

Bug#974890: mp3gain: dies on startup, complaining of missing ASan runtime

2020-11-16 Thread Stefan Fritsch
Am 16.11.20 um 09:44 schrieb Salvatore Bonaccorso: On Mon, Nov 16, 2020 at 04:14:30AM +0100, Adam Borowski wrote: Package: mp3gain Version: 1.6.2-1+b1 Severity: important Trying to run mp3gain results in: ==23813==ASan runtime does not come first in initial library list; you should either

Bug#973932: mp3gain: CVE-2018-10777, CVE-2019-18359: Crashes with fuzzing PoC

2020-11-07 Thread Stefan Fritsch
Package: mp3gain Version: 1.6.2-1+b1 Severity: important Tags: security, patch X-Debbugs-Cc: Debian Security Team mp3gain 1.6.2 still crashes with AdressSanitizer errors on the PoCs mp3gain_poc1 mp3gain_poc2 mp3gain_poc5 mp3gain_CVE-2018-10777 from

Bug#489625: Maybe fixable with apr 1.7

2020-11-01 Thread Stefan Fritsch
notforwarded 489625 thanks Am 29.08.20 um 11:20 schrieb Stefan Fritsch: According to the changelog, apr 1.7 adds all the --tag parameters to the libtool invocations. Maybe this allows this to be fixed. This is not enough. There are many projects that use apr that don't pass the --tag

Bug#489625: Maybe fixable with apr 1.7

2020-08-29 Thread Stefan Fritsch
According to the changelog, apr 1.7 adds all the --tag parameters to the libtool invocations. Maybe this allows this to be fixed. But I won't change that in the -1 upload because I want the python builddep fix to make it to testing without problems.

Bug#898202: ITP: mp3gain

2020-06-14 Thread Stefan Fritsch
Hi, I used to maintain mp3gain a long time ago. I have still use for it for the player in my car and would support you if you want to maintain it. I am still Debian developer and could sponsor your uploads. If you are no longer interested, it may make sense to rename the bug back to RFP.

Bug#954311: libgl1-mesa-dri: Makes KDE konsole unusable

2020-03-24 Thread Stefan Fritsch
Hi Timo, Am 20.03.20 um 09:55 schrieb Timo Aaltonen: > Please file it upstream, this is caused by the new 'iris' driver. In the > meantime, you can force the previous driver with this in a ~/.drirc: > > > > > > > > > Or run the app with the driver to verify it actually helps: > >

Bug#947729: Acknowledgement (radicale: broken after upgrade from stretch)

2019-12-29 Thread Stefan Fritsch
After some more debugging and stracing, I finally got it to work: Debug logging works if one starts radicale from the command line, not as a service. Maybe this is due to --daemonize in the init script? The directory for the converted collection was wrong. The (upper) collection-root must go

Bug#947729: radicale: broken after upgrade from stretch

2019-12-29 Thread Stefan Fritsch
Package: radicale Version: 2.1.11-6 Severity: grave Justification: renders package unusable Hi, I have upgraded my system from stretch. After some head scratching due to the new disk format, I have installed the package listen in NEWS.debian, did radicale --export-storage /var/tmp/radicale

Bug#941122: e1000e is slooow for I219-LM

2019-10-01 Thread Stefan Fritsch
found 941122 4.19.67-2 thanks We have also seen this with the 4.19 kernel in buster. Links to Ubuntu bug reports and commits (but I have not verified that these patches fix the issue): https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1836152

Bug#936034: DSA-4509-1 regression needs to be fixed in subversion

2019-09-30 Thread Stefan Fritsch
upstream fix for segfault with new mod_http2 from DSA-4509-1. +Closes: #936034 + + -- Stefan Fritsch Mon, 30 Sep 2019 09:03:27 +0200 + subversion (1.9.5-1+deb9u4) stretch-security; urgency=high * Backport security fixes from upstream: diff -u subversion-1.9.5/debian/patches/series

Bug#936034: DSA-4509-1 regression needs to be fixed in subversion

2019-09-30 Thread Stefan Fritsch
reassign 936034 libapache2-mod-svn found 936034 1.9.0-1 fixed 1.10.4-1 affects 936034 apache2 thanks DSA-4509-1 for apache2 caused a regression with libapache2-mod-svn that needs a fix in subversion. In agreement with the security team, I will upload a fix for this to security.debian.org

Bug#936034: broken http2 in apache2 2.4.25-3+deb9u8 for mod_dav_svn on stretch?

2019-09-22 Thread Stefan Fritsch
Sorry for the late response. This is unfortunately a bug in subversion that is now triggered by the new http2 module. The fix is here http://svn.apache.org/viewvc?view=revision=1845204 . I will have to ask how this can be fixed, by DSA or by stable point release. Am 29.08.19 um 11:55 schrieb

Bug#930446: popularity-contest: unable to submit report, impossible to debug

2019-06-20 Thread Stefan Fritsch
Am 20.06.19 um 13:25 schrieb Bill Allombert: >> When submission fails, popcon-upload dies with a timeout. There should >> probably be a randomized sleep to distribute the server load better. I >> think there could be a lot more popcon submissions if this is done. > > What is the time in

Bug#930446: popularity-contest: unable to submit report, impossible to debug

2019-06-20 Thread Stefan Fritsch
Hi Bill, I have some new info: When submission fails, popcon-upload dies with a timeout. There should probably be a randomized sleep to distribute the server load better. I think there could be a lot more popcon submissions if this is done. Also, popcon-upload should log errors to syslog. The

Bug#902493: SSL Issue

2019-06-16 Thread Stefan Fritsch
Thank you very much for the testing. On Fri, 14 Jun 2019, Jean-Louis Dupond wrote: > We had the test2 version running for some days on a machine. > But we noticed a quite important issue with it. > > The configuration has a lot of SSL certificates. > Now when doing a lot of sequential requests,

Bug#930446: popularity-contest: unable to submit report, impossible to debug

2019-06-12 Thread Stefan Fritsch
Hmm. After comparing the log files, I think I may have found the issue: Jun 05 06:25:01 c CRON[8719]: (root) CMD (test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )) Jun 05 06:25:05 c runuser[8833]: pam_unix(runuser:session): session opened for user nobody by (uid=0) Jun

Bug#930446: popularity-contest: unable to submit report, impossible to debug

2019-06-12 Thread Stefan Fritsch
Am 12.06.19 um 22:52 schrieb Bill Allombert: > /usr/share/popularity-contest/popcon-upload has an option -d for > debugging that you could try. >From the command line, this works without errors: /usr/share/popularity-contest/popcon-upload -d -u http://popcon.debian.org/cgi-bin/popcon.cgi -f

Bug#930446: popularity-contest: unable to submit report, impossible to debug

2019-06-12 Thread Stefan Fritsch
Package: popularity-contest Version: 1.67 Severity: normal Dear Maintainer, on several of my hosts, popularity-contest logs unable to submit report to http://popcon.debian.org/cgi-bin/popcon.cgi. unable to submit report. But it does not log why and there is no way that I could find to

Bug#923661: tt-rss: PHP Fatal error: Uncaught PDOException: SQLSTATE[22001]: String data, right truncated

2019-05-11 Thread Stefan Fritsch
Hi Helmut, Am 08.05.19 um 19:23 schrieb Helmut Grohne: Thank you for the detailed analysis. The actual failure we see here is secondary. It tries to log an error and fails. Changing the LOG_DESTINATION fixes the secondary error. The primary cause seems to live in JShrink though and I guess that

Bug#928173: apache2: SSLCipherSuite is ignored

2019-04-30 Thread Stefan Fritsch
On Monday, 29 April 2019 13:22:56 CEST Olaf Zaplinski wrote: > I have set > SSLCipherSuite "-ALL ECDHE-ECDSA-CHACHA20-POLY1305 > ECDHE-RSA-CHACHA20-POLY1305 ECDHE-ECDSA-AES256-GCM-SHA384" in > mods-enabled/ssl.conf > > SSLProtocol is not defined anywhere. SSLCipherSuite is only defined here. > >

Bug#927793: dmeventd hangs for > 1 minute during update

2019-04-23 Thread Stefan Fritsch
Package: dmeventd Version: 2:1.02.155-2 Severity: important Dear Maintainer, I upgraded my system from stretch to buster and the postinstall hung for a long time. Some log file excerpts: $ grep dmevent /var/log/dpkg.log 2019-04-20 09:55:47 upgrade dmeventd:amd64 2:1.02.137-2 2:1.02.155-2

Bug#925061: apache2: Cannot disabled old TLS Versions (prior to TLS1.2)

2019-04-22 Thread Stefan Fritsch
Hi, On Tue, Mar 19, 2019 at 05:18:49PM +0100, Thomas Knaller wrote: > Therefore I edited /etc/apache2/mods-enabled/ssl.conf so that it > states "SSLProtocol TLSv1.2", which should disable all SSLProtocols > except for TLS1.2, but TLS1.0 und TLS1.1 are still active, as seen > with nmap: > > #

Bug#927693: unblock: apr-util/1.6.1-4

2019-04-21 Thread Stefan Fritsch
with mariadb 10.3. Closes: #926400 + + -- Stefan Fritsch Sun, 21 Apr 2019 09:39:02 +0200 + apr-util (1.6.1-3) unstable; urgency=medium [ Stefan Fritsch ] diff -Nru apr-util-1.6.1/debian/patches/support_mariadb.patch apr-util-1.6.1/debian/patches/support_mariadb.patch --- apr-util-1.6.1/debian

Bug#489625: libapr1-dev: please don't ship your own copy of libtool

2019-04-21 Thread Stefan Fritsch
forwarded 489625 https://bz.apache.org/bugzilla/show_bug.cgi?id=62640 thanks https://bz.apache.org/bugzilla/show_bug.cgi?id=62640 has some infos and a patch

Bug#900821: linux-image-4.9.0-6-amd64: apache reads wrong data over cifs filesystems served by samba

2019-04-21 Thread Stefan Fritsch
Hi, by default, apache uses mmap, so probably mmap is broken on cifs. An alternate workaround should be to set EnableMMAP off in the apache config. Cheers, Stefan

Bug#926609: unblock: apache2/2.4.38-3

2019-04-07 Thread Stefan Fritsch
ath safety + in server/request.c, server/util.c. +- debian/patches/CVE-2019-0220-3.patch: maintainer mode fix in + server/util.c. +- CVE-2019-0220 + + [ Stefan Fritsch ] + * Pull security fixes from 2.4.39 via Ubuntu + * CVE-2019-0197: mod_http2: Fix possible crash on late upgr

Bug#913823: apache2: dav.load does not check for an already loaded dav_module

2019-04-07 Thread Stefan Fritsch
On Friday, 1 February 2019 03:49:22 CEST Nye Liu wrote: > Package: apache2 > Version: 2.4.38-1 > Followup-For: Bug #913823 > > Workaround in /etc/apache2/mods-available/dav.load: > > > LoadModule dav_module /usr/lib/apache2/modules/mod_dav.so > > > Alternately just make dav_fs not depend

Bug#926400: libapr1-dbd-mysql: apache fails to start if dbd with mysql is used

2019-04-07 Thread Stefan Fritsch
serverity 926400 grave thanks On Thu, Apr 04, 2019 at 03:00:19PM +0200, csta...@digitus.itk.ppke.hu wrote: > AH00526: Syntax error on line 19 of /etc/apache2/sites-enabled/mydomain.conf: > Can't load driver file apr_dbd_mysql.so > Action 'start' failed. > In this current form this might be

Bug#884562: Enable CONFIG_SND_SOC_SPDIF for cubietruck spdif

2019-04-05 Thread Stefan Fritsch
Ping ? I have opened a merge request https://salsa.debian.org/kernel-team/linux/merge_requests/137

Bug#902493: apache2-bin: Event MPM listener thread may get blocked by SSL shutdowns

2019-03-22 Thread Stefan Fritsch
On Monday, 11 March 2019 09:35:45 CET Sven Hartge wrote: > This breaks quite fast, resulting in apache2 processes at 100% CPU, doing > nothing but: Thanks for the quick feed-back. Second try with different approach is at

Bug#902493: apache2-bin: Event MPM listener thread may get blocked by SSL shutdowns

2019-03-10 Thread Stefan Fritsch
Hi, I am not comfortable with switching to mpm_worker, either, since this would be a significant behavior change. I have however tried a backport of the patch referenced in the upstream bug report and put a build here:

Bug#884562: Enable CONFIG_SND_SOC_SPDIF for cubietruck spdif

2019-03-03 Thread Stefan Fritsch
tags 884562 + patch thanks ping? Is there any reason why this option cannot be enabled? It works for me. Patch is attached. Cheers, Stefancommit ed6bb01ca53088401ddb7e17653e0a9b8bf8d9ee (HEAD -> master) Author: Stefan Fritsch Date: Sun Mar 3 13:40:49 2019 +0100 spdif diff --

Bug#923661: tt-rss: PHP Fatal error: Uncaught PDOException: SQLSTATE[22001]: String data, right truncated

2019-03-03 Thread Stefan Fritsch
Package: tt-rss Version: 18.12+dfsg-1 Severity: important Hi, after upgrading from 16.8+git20160826+dfsg-3 (which I had run under Debian stretch), tt-rss fails to display anything after the login page. There is this error: [Sun Mar 03 13:15:12.954927 2019] [php7:error] [pid 2055] [client XXX]

Bug#915103: Apache2 HTTP/2 connection problems with Safari clients

2019-02-16 Thread Stefan Fritsch
On Tuesday, 12 February 2019 16:45:34 CET Philip Iezzi wrote: > Hi Stefan, > > Confirming again that your patch from Feb 4th fixed the issue. I've got now > positive feedback from my customers and have upgraded all HTTPS-sites back > to HTTP/2. Will this patch make it into Debian Stretch? > >

Bug#902493: apache2-bin: Event MPM listener thread may get blocked by SSL shutdowns

2019-02-16 Thread Stefan Fritsch
On Tuesday, 12 February 2019 17:44:39 CET Gedalya wrote: > On 2/13/19 12:38 AM, Jan Wagner wrote: > > backports is not meant for fixing things. beside that it would require > > all rebuilding most of the additional apache modules not shiped by the > > apache2 source package. > > So we're back to

Bug#902493: apache2-bin: Event MPM listener thread may get blocked by SSL shutdowns

2019-02-10 Thread Stefan Fritsch
Between 2.4.25 and the fix for this issue, there were some intrusive changes in mpm_evnt. If we did a backport, rhe risk of introducing regressions would be quite high. Therefore, and because the next Debian stable release is quite near, I don't think it makes sense to backport the fix.

Bug#921024: apache2: DEP8 failure with 2.4.38-1: allowmethods.t

2019-02-04 Thread Stefan Fritsch
On Thursday, 31 January 2019 19:16:06 CET Andreas Hasenack wrote: > Package: apache2 > Version: 2.4.38-1 > Severity: normal > > Dear Maintainer, > > The updated 2.4.38-1 package for apache2 triggered a DEP8 test failure: > > https://ci.debian.net/packages/a/apache2/unstable/amd64/ > > >From

Bug#915103: Apache2 HTTP/2 connection problems with Safari clients

2019-02-04 Thread Stefan Fritsch
Hi Philip, sorry for the late respone, I have been quite busy with other things. I could find no indication that any other upstream release has the same bug. Therefore I hope that adding more fixes from upstream versions up to the version from where I took the security fixes (2.4.34 and

Bug#914732: lists.debian.org: Request for new mailing list: debian-dug-muc

2019-01-06 Thread Stefan Fritsch
On Mon, 26 Nov 2018 20:12:24 +0100 Michael Banck wrote: > Please create the Debian User Group list debian-dug-muc for the Munich > local area user group, https://wiki.debian.org/LocalGroups/DebianMuc seconded. Cheers, Stefan

Bug#915103: Apache2 HTTP/2 connection problems with Safari clients

2018-12-17 Thread Stefan Fritsch
Hi Philip, On Friday, 14 December 2018 22:49:13 CET Philip Iezzi wrote: > But the patch from bee2facd9343beda10677b139cd9b2e49e986f01 > (https://salsa.debian.org/apache-team/apache2/commit/bee2facd9343beda10677b > 139cd9b2e49e986f01) was already applied to latest apache2 package in Debian > 9.6

Bug#914297: apache2: getrandom call blocks on first startup, systemd kills with timeout

2018-12-17 Thread Stefan Fritsch
I have started a thread on debian-devel: https://lists.debian.org/debian-devel/2018/12/msg00184.html Please participate. Cheers, Stefan

Bug#914297: apache2: getrandom call blocks on first startup, systemd kills with timeout

2018-12-17 Thread Stefan Fritsch
On Mon, 17 Dec 2018, Michael Biebl wrote: > Am 17.12.18 um 13:52 schrieb Stefan Fritsch: > > On Mon, 17 Dec 2018, Michael Biebl wrote: > >>> It turns out there was a similar bug against openssh which was closed as > >>> wontfix [1]. I don't see how apache c

Bug#914297: apache2: getrandom call blocks on first startup, systemd kills with timeout

2018-12-17 Thread Stefan Fritsch
On Mon, 17 Dec 2018, Michael Biebl wrote: > > Well, this problem is much more widespread (in terms of software that > > requests entropy needlessly) than you might think. If you override the > > unit for something as deterministic as systemd-tmpfiles-setup.service > > to run it under strace and

Bug#914297: apache2: getrandom call blocks on first startup, systemd kills with timeout

2018-12-17 Thread Stefan Fritsch
On Mon, 17 Dec 2018, Michael Biebl wrote: > > It turns out there was a similar bug against openssh which was closed as > > wontfix [1]. I don't see how apache can do anything about this, either. > > There is. Don't request high-quality randomness during boot unless you > explicitly need it.

Bug#914297: apache2: getrandom call blocks on first startup, systemd kills with timeout

2018-12-15 Thread Stefan Fritsch
reassign 914297 systemd affects 914297 apache2 thanks On Saturday, 15 December 2018 02:24:54 CET Alexander E. Patrakov wrote: > Stefan Fritsch : > > The rng should be initialized after the seed is loaded from disk. > > This is false according to systemd developers. Its s

Bug#914297: apache2: getrandom call blocks on first startup, systemd kills with timeout

2018-12-14 Thread Stefan Fritsch
On Friday, 14 December 2018 12:43:29 CET Adrian Bunk wrote: > On Sun, Nov 25, 2018 at 11:35:37PM +0100, Stefan Fritsch wrote: > >... > > > > I don't see why it should take so > > long for the random number generator to initialize. > > > >... > >

Bug#915103: Apache2 HTTP/2 connection problems with Safari clients

2018-12-02 Thread Stefan Fritsch
On Friday, 30 November 2018 15:54:07 CET Andreas Ziegler wrote: > Package: apache2 > Version: 2.4.25-3+deb9u6 > > When i load a picture using safari from an apache webserver with HTTP/2 > enabled and repeat that multiple times in a row (F5), > at least each 3rd request fails with > "Failed to

Bug#840580: apache2-bin: crashes when issuing a restart while mod_cgid is enabled

2018-11-25 Thread Stefan Fritsch
On Sunday, 25 November 2018 19:07:56 CET Bernhard Übelacker wrote: > Dear Maintainer, > tried to find out the actual location that the backtrace points to. > > Unfortunately I could not make any clue out of the line > containing /usr/sbin/apache2(+0x29e450). > > But at least, I think, the line

Bug#914297: apache2: getrandom call blocks on first startup, systemd kills with timeout

2018-11-25 Thread Stefan Fritsch
How long is the timeout after which it is killed? What is the status of systemd-random-seed.service in that case? I don't see why it should take so long for the random number generator to initialize. But maybe apache2 needs to add a dependency. Please provide the output of journalctl -b

Bug#910917: RFA: apache2 -- Apache HTTP Server

2018-11-21 Thread Stefan Fritsch
Hi, Xavier, yes, please do a join request. If you are looking for work, one thing that should be done before buster is enabling http/2 by default (#880993). Mosab and Jason, are you still interested? Cheers, Stefan On Tuesday, 20 November 2018 10:41:55 CET Xavier wrote: > Hi all, > > I'm DD,

Bug#910917: RFA: apache2 -- Apache HTTP Server

2018-11-07 Thread Stefan Fritsch
Hi Jason, sorry for the late response. I forgot to subscribe to the wnpp report and did not get your mail. On Saturday, 20 October 2018 04:50:50 CET Jason Vigil wrote: > To be honest, I'm not terribly experienced with Apache HTTPD nor Debian > packaging, but I am fairly experienced as a Debian

Bug#910917: RFA: apache2 -- Apache HTTP Server

2018-11-07 Thread Stefan Fritsch
ast. Cheers, Stefan [1] https://salsa.debian.org/apache-team/apache2 [2] https://www.debian.org/doc/manuals/maint-guide/index.en.html [3] https://www.oftc.net/ > > Cheers, > Mosab. > On Sat, 13 Oct 2018 13:29:51 +0200 Stefan Fritsch > > wrote: > > Package: wnpp > > Seve

Bug#912277: apache2: does not start any more: AH01903: Failed to configure CA certificate chain!

2018-11-04 Thread Stefan Fritsch
On Sunday, 4 November 2018 18:36:19 CET Thorsten Glaser wrote: > This is a real WTF. I found https://serverfault.com/a/892300/189656 > and thought “hey, Apache 2 still documents SSLCertificateChainFile, > plus it’s the proper way to specify the chain given it’s normally > separate from the

Bug#912770: stretch-pu: package apache2/2.4.25-3+deb9u6

2018-11-03 Thread Stefan Fritsch
by continuous SETTINGS. +Closes: #909591 + * mod_proxy_fcgi: Fix segfault. Closes: #902906 + + -- Stefan Fritsch Sat, 03 Nov 2018 19:46:19 +0100 + apache2 (2.4.25-3+deb9u5) stretch; urgency=medium * Upgrade mod_http and mod_proxy_http2 to the versions from 2.4.33. This diff -Nru apache2-2.4.25

Bug#912277: apache2: does not start any more: AH01903: Failed to configure CA certificate chain!

2018-11-03 Thread Stefan Fritsch
On Monday, 29 October 2018 20:31:54 CET Thorsten Glaser wrote: > tglase@tglase:~ $ cat /var/log/apache2/error.log > [Mon Oct 29 20:18:58.090841 2018] [ssl:emerg] [pid 17306] AH01903: Failed to > configure CA certificate chain! > [Mon Oct 29 20:18:58.090919 2018] [ssl:emerg] [pid 17306] AH02311:

Bug#910917: RFA: apache2 -- Apache HTTP Server

2018-10-13 Thread Stefan Fritsch
Package: wnpp Severity: normal I am looking for new maintainers for the Apache httpd server (the apache2 package). The apache2 package has a relatively complex packaging and config file handling. There are also a lot of third-party module packages in Debian. Therefore, some experience with using

Bug#910914: kmail crashes if akonadi is already running

2018-10-13 Thread Stefan Fritsch
Package: kmail Version: 4:18.08.1-1 Severity: important If I start kmail for the second time after a login, i.e. while akonadi is already, it crashes. A workaround is to never close it after login, or do 'akonadictl stop' before starting it again. Backtrace is attached. -- System

Bug#902657: Segfault is caused by libcap-ng0 0.7.9

2018-07-28 Thread Stefan Fritsch
retitle 902657 graceful/restart results in segfault if libcap-ng0 is loaded severity 902657 important block 902657 by 904808 thanks The problem is caused by libcap-ng0 0.7.9 . This is usually pulled in by php extensions. There is nothing apache can do. Unfortunately, downgrading to 0.7.7 from

Bug#904808: libcap-ng0: libcap-ng's use of pthread_atfork causes segfaults

2018-07-28 Thread Stefan Fritsch
Package: libcap-ng0 Version: 0.7.9-1 Severity: grave Justification: renders package unusable Hi, apache httpd loads and unloads modules during a reload of the server configuration. This causes the pthread_atfork entry that is installed by libcap-ng0 to point to code that is no longer in the

Bug#902658: apache2: apachectl graceful/restart results in segfault

2018-07-17 Thread Stefan Fritsch
On Tuesday, 17 July 2018 21:12:48 CEST gregor herrmann wrote: > On Tue, 17 Jul 2018 20:54:02 +0200, Stefan Fritsch wrote: > > Can one of you please check how libcap-ng is pulled into the process. > > Something like this should do the trick (replace XXX with the pid of one > &g

Bug#902658: apache2: apachectl graceful/restart results in segfault

2018-07-17 Thread Stefan Fritsch
On Friday, 29 June 2018 10:35:32 CEST mer.at wrote: > when i do an "apachectl graceful" or "apachectl restart", i get > segfaults. I don't think this is a bug in apache, at least not directly. > if i then do a /etc/init.d/apache2 restart, it works normally > /etc/init.d/apache2 restart and

Bug#903721: apache2-bin: Missing mod_md.so in apache2-bin

2018-07-17 Thread Stefan Fritsch
On Friday, 13 July 2018 19:33:24 CEST marcelo wrote: > The mod_md not works in the last version in apache, i understood the mod_md > now is part of apache, but the mod_md not work, because missing archives, > for example the archive mod_md.so, i believe the solution is the same apply > in

Bug#903958: Apache processes limited to 1000

2018-07-17 Thread Stefan Fritsch
On Tuesday, 17 July 2018 09:50:08 CEST Thomas Mühlberg wrote: > Package: apache2 apache2-bin apache2-data apache2-utils > Version: 2.4.25-3+deb9u5 > > After upgrade from version 2.4.25-3+deb9u4 to 2.4.25-3+deb9u5 the Apache > processes are limited to 1000. > After rollback to version

Bug#894713: stretch-pu: apache2/2.4.25-3+deb9u5

2018-06-25 Thread Stefan Fritsch
On Sunday, 24 June 2018 19:00:22 CEST Adam D. Barratt wrote: > On Sat, 2018-06-02 at 10:29 +0200, Stefan Fritsch wrote: > > +apache2 (2.4.25-3+deb9u5) stretch; urgency=medium > > + > > + * This package upgrades mod_http2 to the version from apache2 > > 2.4.33. This &

Bug#900612: apache2-suexec-pristine: Packaging steps undo setting of setuid bit

2018-06-02 Thread Stefan Fritsch
On Saturday, 2 June 2018 02:06:10 CEST Jason Perrin wrote: > This appears to be a problem in the source for this package, on the master > branch, as well as on separate branches for different distros: > https://salsa.debian.org/apache-team/apache2/blob/master/debian/rules#L148-1 > 53 I'm not sure

Bug#894713: stretch-pu: apache2/2.4.25-3+deb9u5

2018-06-02 Thread Stefan Fritsch
On Sunday, 20 May 2018 18:32:55 CEST Stefan Fritsch wrote: > As I don't see any other way to fix the open issues, I would still like to > go ahead. But I will prepare a new package/diff with a NEWS.Debian entry > that informs about this change. The new debdiff is attached. the NEWS par

Bug#898304: Please Depend on libcurl3 | libcurl4

2018-05-20 Thread Stefan Fritsch
On Thursday, 10 May 2018 00:21:44 CEST 積丹尼 Dan Jacobson wrote: > Package: apache2-bin > Version: 2.4.33-3 > > Please Depend on libcurl3 | libcurl4, > else we cannot upgrade our system. The dependency is generated automatically depending on which version of libcurl is used during compilation.

Bug#894713: stretch-pu: apache2/2.4.25-3+deb9u5

2018-05-20 Thread Stefan Fritsch
Hi, On Sunday, 13 May 2018 19:15:22 CEST Stefan Fritsch wrote: > On Tuesday, 3 April 2018 14:07:33 CEST Stefan Fritsch wrote: > > I would like to do an upgrade of apache2 in stretch that upgrades the > > complete mod_http2 and mod_proxy_http2 modules from the versions

Bug#894713: stretch-pu: apache2/2.4.25-3+deb9u5

2018-05-13 Thread Stefan Fritsch
Hi, On Tuesday, 3 April 2018 14:07:33 CEST Stefan Fritsch wrote: > I would like to do an upgrade of apache2 in stretch that upgrades the > complete mod_http2 and mod_proxy_http2 modules from the versions from > 2.4.25 to the versions from 2.4.33. > > The reason is that the fix fo

Bug#884562: Enable CONFIG_SND_SOC_SPDIF for cubietruck spdif

2018-05-13 Thread Stefan Fritsch
found 884562 4.16.5-1 thanks Hi, is there a reason why this has not been enabled or has it just slipped through? Cheers, Stefan

Bug#898563: apache2: htcacheclean init script does not read /etc/default/apache-htcacheclean

2018-05-13 Thread Stefan Fritsch
Package: apache2 Version: 2.4.25-3+deb9u4 Severity: normal While /etc/init.d/apache-htcacheclean contains this comment # Default values. Edit /etc/default/apache-htcacheclean$DIR_SUFFIX to # change these it does not actually read that file. This has been fixed in sid in 2.4.27-4 .

Bug#881725: apache2: reload fails inside (libvirt) lxc container

2018-04-23 Thread Stefan Fritsch
On Monday, 16 April 2018 21:51:36 CEST Stefan Fritsch wrote: > So tmpreaper should exclude systemd-private-* files by default. Moritz, do > you also have some cron job cleaning up stale files in /tmp ? tmpreaper needs to exclude dirs inside the systemd-private-* dir, too (there is a t

Bug#895237: apache2: apachectl does not use systemd for restarts

2018-04-23 Thread Stefan Fritsch
On Sunday, 15 April 2018 21:50:57 CEST Jan Heitkötter wrote: > The hooks in Let’s Encrypt’s conffile say “apachectl -k”; the manpage > does not explain this option. Omitting -k makes things work: options unknown to apachectl are passed to apache2 and apache2 -k start tells apache2 to do a normal

Bug#881725: apache2: reload fails inside (libvirt) lxc container

2018-04-16 Thread Stefan Fritsch
On Monday, 16 April 2018 20:34:00 CEST Matthew Gabeler-Lee wrote: > On Sat, 14 Apr 2018, Stefan Fritsch wrote: > > This seems to be a systemd bug. Changing PrivateTmp from true to false in > > apache2.service fixes the issue. But even with PrivateTmp it works for > >

Bug#895237: apache2: apachectl does not use systemd for restarts

2018-04-14 Thread Stefan Fritsch
On Thursday, 12 April 2018 11:56:04 CEST Axel Beckert wrote: > Jan Heitkötter wrote: > > Default behaviour is do stop/start Apache using apachectl which fails in > > installations running systemd. Apache will stop, but not start again. Using apachectl stop / start / restart works fine for me with

Bug#881725: apache2: reload fails inside (libvirt) lxc container

2018-04-14 Thread Stefan Fritsch
On Fri, 9 Mar 2018, Moritz Muehlenhoff wrote: > On Tue, Nov 14, 2017 at 02:46:00PM +, Matthew Gabeler-Lee wrote: > > Package: apache2 > > Version: 2.4.25-3+deb9u3 > > Severity: normal > > > > When running inside a libvirt-managed lxc os container, the reload command > > on the systemd unit

Bug#894827: apache2: Apache workers are hanging after reload

2018-04-05 Thread Stefan Fritsch
Hi Dan, On Wed, 4 Apr 2018, Dan Benton wrote: > Package: apache2 > Version: 2.4.10-10+deb8u12 > Severity: normal Is this a new issue with version 2.4.10-10+deb8u12 (from the security update a few days ago) or have you also observed it with the previous version 2.4.10-10+deb8u11? Cheers,

Bug#894713: stretch-pu: Pre-approval of package apache2/2.4.25-3+deb9u5

2018-04-03 Thread Stefan Fritsch
Package: release.debian.org Severity: normal Tags: stretch User: release.debian@packages.debian.org Usertags: pu Hi, I would like to do an upgrade of apache2 in stretch that upgrades the complete mod_http2 and mod_proxy_http2 modules from the versions from 2.4.25 to the versions from 2.4.33.

Bug#889170: apr-util: build failure with new gdbm

2018-02-25 Thread Stefan Fritsch
On Friday, 2 February 2018 23:32:35 CET Gianfranco Costamagna wrote: > Hello, before uploading new gdbm in unstable, I tested all the > reverse-dependencies, except for the packages that were already broken/not > building. > > This sounds to be the case for this one, and now I don't know how to

Bug#881725: apache2: reload fails inside (libvirt) lxc container

2017-12-25 Thread Stefan Fritsch
Hi Matthew, I don't know libvirt lxc containers at all, but ... On Tue, 14 Nov 2017, Matthew Gabeler-Lee wrote: > Nov 14 14:38:33 hostname systemd[1]: Reloading The Apache HTTP Server. > Nov 14 14:38:33 hostname systemd[11798]: apache2.service: Failed at step > NAMESPACE spawning

Bug#884562: linux-image-4.9.0-4-armmp-lp: Enable CONFIG_SND_SOC_SPDIF for cubietruck spdif

2017-12-16 Thread Stefan Fritsch
package: src:linux version: 4.9.65-3 severity: important This is a follow-up to #857410 . CONFIG_SND_SOC_SPDIF is also required to make spdif work on the cubietruck. By accident I have not stopped using my self-compiled kernel and did not notice that spdif does not actually work with the

Bug#877715: apache2: apache won't start after reboot when listening on IPv6 address

2017-10-08 Thread Stefan Fritsch
On Wednesday, 4 October 2017 20:41:38 CEST Tiger!P wrote: > I tried to add a file /etc/systemd/system/apache2.service.d/after.conf > with the following content: > 8< > [Unit] > Wants=network-online.target > After=network.target remote-fs.target nss-lookup.target > network-online.target >

  1   2   3   4   5   6   7   8   9   10   >