This bug was fixed in the package apache2 - 2.4.29-1ubuntu1
---
apache2 (2.4.29-1ubuntu1) bionic; urgency=medium
* Merge with Debian unstable. Remaining changes:
- debian/{control, apache2.install, apache2-utils.ufw.profile,
apache2.dirs}: Add ufw profiles.
- debian/apache2.py, debian/apache2-bin.install: Add apport hook.
- debian/patches/086_svn_cross_compiles: Backport several cross
fixes from upstream
- d/index.html, d/icons/ubuntu-logo.png, d/apache2.postrm: replace
Debian with Ubuntu on default page.
+ d/source/include-binaries: add Ubuntu icon file
- Correct systemd-sysv-generator behavior by customizing some
parameters:
+ d/apache2-systemd.conf: add a drop-in file to specify some
parameters for the systemd unit (type=Forking and
RemainsAfterExit=no), this allow a correct state synchronisation
between systemctl status and actual state of apache2 daemon.
+ d/apache2.install: place the apache2-systemd.conf file in the
correct location.
- Don't build http2 module (nghttp2 still not in main) (LP 1687454)
+ debian/control: removed libnghttp2-dev Build-Depends (in universe).
+ debian/config-dir/mods-available/http2.load: removed.
+ debian/rules: removed proxy_http2 from configure.
* Switch back to OpenSSL 1.0 as we don't yet have 1.1:
- debian/control: switch BuildDepends to libssl1.0-dev
- debian/control: remove Breaks on gridsite and libapache2-mod-dacs
- debian/rules: remove openssl virtual package and logic
apache2 (2.4.29-1) unstable; urgency=medium
[ Stefan Fritsch ]
* Replace outdated dependency on dh-systemd
[ Ondřej Surý ]
* New upstream version 2.4.29
* Refresh quilt patches
* Add mod_ssl_md patch needed for libapache2-mod-md (Closes: #877343)
* Refresh patches on top of upstream release 2.4.29
* Fix Apache crash on restarts (ASF Bug 61558)
* Add deconfigure to the list of recognized scripts (Closes: #877524)
apache2 (2.4.27-6) unstable; urgency=high
* CVE-2017-9798: Don't allow new methods to be registered in .htaccess files
which could result in HTTP OPTIONS method leaking Apache's server memory.
Closes: #876109
* Fix argument escaping in apachectl. Closes: #876384
apache2 (2.4.27-5) unstable; urgency=medium
* Upload to unstable.
* Update "Breaks:" for openssl transition.
* Bump Standards-Version to 4.1.0. No changes needed.
apache2 (2.4.27-4) experimental; urgency=medium
* Use 'invoke-rc.d' instead of init script in logrotate script.
Closes: #857607
* Make the apache-htcacheclean init script actually look into
/etc/default/apache-htcacheclean for its config. LP: #1691495
* mime.conf: Guard AddOutputFilter INCLUDES with proper .
LP: #1675184
* Use 'service' instead of init script in monit example config.
* Bump Standards-Version to 4.0.1. Other changes:
- change package priorities from extra to optional
* Use libprotocol-http2-perl in autopkgtest.
* Update test suite to svn r1804214.
* Various tweaks to the test suite autopkgtest to avoid having to skip
any test.
* Also remove -DBUILD_DATETIME and -fdebug-prefix-map from config_vars.mk
to avoid them being used by apxs.
* deflate.conf: Remove mention of MSIE6
apache2 (2.4.27-3) experimental; urgency=medium
* Switch to openssl 1.1. Again closes: #851094
* Add versioned breaks for gridsite, libapache2-mod-dacs because of
openssl transition.
* Provide new apache2-api-20120211-openssl1.1 virtual package and make
dh_apache2 generate a dependency on it if there is a build-dep on
apache2-ssl-dev.
-- Marc Deslauriers Fri, 10 Nov 2017
10:51:46 -0500
** Changed in: apache2 (Ubuntu)
Status: Expired => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-9798
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1675184
Title:
mime.conf ignores dependency to mod_include
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/1675184/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
