Subject: Accepted: apache2 2.2.9-1ubuntu1 (source)

From: Chuck Short <[email-masked]>
Date: Mon, 16 Jun 2008 12:35:25 -0000

Accepted:
 OK: apache2_2.2.9.orig.tar.gz
 OK: apache2_2.2.9-1ubuntu1.diff.gz
 OK: apache2_2.2.9-1ubuntu1.dsc
     -> Component: main Section: web

Format: 1.7
Date: Sun, 15 Jun 2008 05:01:28 +0100
Source: apache2
Binary: apache2.2-common apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-utils apache2-suexec apache2-suexec-custom apache2 apache2-doc apache2-prefork-dev apache2-threaded-dev apache2-src apache2-dbg
Architecture: source
Version: 2.2.9-1ubuntu1
Distribution: intrepid
Urgency: low
Maintainer: Ubuntu Core Developers <[email-masked]>
Changed-By: Chuck Short <[email-masked]>
Description: 
 apache2    - Next generation, scalable, extendable web server
 apache2-dbg - Apache debugging symbols
 apache2-doc - documentation for apache2
 apache2-mpm-event - Event driven model for Apache HTTPD
 apache2-mpm-prefork - Traditional model for Apache HTTPD
 apache2-mpm-worker - High speed threaded model for Apache HTTPD
 apache2-prefork-dev - development headers for apache2
 apache2-src - Apache source code
 apache2-suexec - Standard suexec program for Apache 2 mod_suexec
 apache2-suexec-custom - Configurable suexec program for Apache 2 mod_suexec
 apache2-threaded-dev - development headers for apache2
 apache2-utils - utility programs for webservers
 apache2.2-common - Next generation, scalable, extendable web server
Closes: 266835 312252 349716 373969 409970 475150 477522 479136 480893 484800
Launchpad-Bugs-Fixed: 235294
Changes: 
 apache2 (2.2.9-1ubuntu1) intrepid; urgency=low
 .
   * Merge from debian unstable, remaining changes:
     - Dropped debian/patches/100_mpm_wokers_crash.dpatch. Already included
       upstream. (LP: #235294)
     - Dropped debian/patches/059_ssl_memleak_fix_PR44975.dpatch. Already included      upstream.
     - Updated maintainer field according to spec.
 .
 apache2 (2.2.9-1) unstable; urgency=low
 .
   * New upstream release. Notable changes:
     - mod_proxy_http: Better handling of excessive interim responses from
       origin server to prevent potential denial of service and high memory
       usage (CVE-2008-2364).
     - mod_proxy_balancer: Prevent CSRF attacks against the balancer-manager
       (CVE-2007-6420).
     - Worker / Event MPM: Fix race condition in pool recycling that leads to
       segmentation faults under load. (Closes: #484800)
     - mod_proxy: Keep connections to the backend persistent in the HTTPS case.
     - mod_proxy: Support environment variable interpolation in reverse
       proxying directives.
     - mod_headers: Add 'merge' option to avoid duplicate values within the
       same header.
     - mod_substitute: The default is now flattening the buckets after each
       substitution. The newly added 'q' flag allows for the quicker, more
       efficient bucket-splitting.
   * Shorten the init script's waiting period during 'restart' from 10 to 4
     seconds. This should still be plenty to allow the apache processes to
     close their listening sockets. Make the wait even shorter if apache dies
     faster. (Closes: #479136)
   * Fix some lintian warnings:
     - Add some missing patch descriptions.
     - Point to /usr/share/common-licenses instead of including the license in
       the copyright file.
 .
 apache2 (2.2.8-5) unstable; urgency=low
 .
   * Replace a2{en,dis}{mod,site} by a rewritten version that
     - supports wildcards (Closes: #373969).
     - can be influenced with environment variables (Closes: #349716).
     - checks existing symlinks for correctness (Closes: #409970).
     - allows to remove dead symlinks (Closes: #480893).
   * Move suexec suid helper program to a separate package apache2-suexec,
     which is not installed by default. Provide an alternative version of
     suexec, which can be customized with a config file. This can be found in
     the apache2-suexec-custom package. Closes: #312252, #266835
   * Some more suexec fixes:
     - Fix race condition when changing directories.
     - Accept only /var/www/*, and not /var/www*. The same for public_html/*
       instead of public_html* (CVE-2007-1742).
     - Raise the minimum userid that suexec may change to from 100 to 1000.
   * Enable mod_deflate in new installs.
   * Include config.nice in apache2-src. This hopefully allows apache2-mpm-itk
     to drop the build-dependency on apache2-prefork-dev.
   * Mention environment variables in apache2 and apache2ctl man pages and point
     to README.Debian. (Closes: #475150)
   * Drop unneeded build-dep on libtool.
   * Drop obsolete apache2-mpm-perchild package (closes: #477522).
   * Don't fail in postinst if there is a dangling symlink /var/www/index.html.
   * Fix typo in bug number in 2.2.8-3 changelog entry.
   * Use dh_lintian in debian/rules.
Files: 
 38d636773cd889e1aa80e0fef715eb95 1359 web optional apache2_2.2.9-1ubuntu1.dsc
 80d3754fc278338033296f0d41ef2c04 6396996 web optional apache2_2.2.9.orig.tar.gz
 fe07d54a6c3d50fa02aa3f0a02724ae4 121524 web optional apache2_2.2.9-1ubuntu1.diff.gz
Original-Maintainer: Debian Apache Maintainers <[email-masked]>