Accepted apache2 2.0.55-4 (source)
Ubuntu Archive Auto-Sync
katie at jackass.ubuntu.com
Tue Jan 17 02:20:05 GMT 2006
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Origin: Debian/unstable
Format: 1.7
Date: Tue, 17 Jan 2006 02:03:54 +0000
Source: apache2
Binary: apache2-prefork-dev, apache2-mpm-perchild, apache2-threaded-dev, libapr0-dev, apache2-mpm-worker, apache2, apache2-common, apache2-utils, apache2-doc, apache2-mpm-prefork, libapr0
Architecture: source
Version: 2.0.55-4
Distribution: dapper
Urgency: low
Maintainer: Debian Apache Maintainers <debian-apache at lists.debian.org>
Changed-By: Ubuntu Archive Auto-Sync <katie at jackass.ubuntu.com>
Description:
apache2 - next generation, scalable, extendable web server
Closes: 307921 330275 339323 340761 345922
Changes:
apache2 (2.0.55-4) unstable; urgency=low
.
* Add 050_mod_imap_CVE-2005-3352 to escape untrusted referer headers in
mod_imap before outputting HTML to avoid XSS attacks; see CVE-2005-3352
* Add 051_mod_ssl_CVE-2005-3357 to avoid a remote denial of service in
threaded MPMs when making a non-SSL connection to an SSL-enabled port
on a server with a custom 400 error document defined; see CVE-2005-3357
* Clean up our use of trailing slashes on directories in debian/rules, so
the newer, pickier, obviously very improved coreutils doesn't bite us.
* Remove some cruft from apache2-common's postinst, dealing with upgrade
scenarios from versions older than those released in Sarge or Warty.
* Use "SHELL := sh -e" in debian/rules, so the build will stop on shell
errors, instead of blundering on to later make targets (closes: #340761)
* Recreate /var/run/apache2 and /var/lock/apache2 in our init script, in
case the user has /var/run and /var/lock on tmpfs, which is fasionable.
* Make our init script a /bin/bash script instead of a /bin/sh script, so
we can abuse it with regex globbing (#348189, #347962, #340955, #342008)
* Take patch from Adrian Bridgett to output errors from our config test
in the init script, but only do so when we're VERBOSE (closes: #339323)
* In the spirit of the LSB, make our init script exit 2 when called with
incorrect arguments, and exit 4 when asked for status (closes: #330275)
* Fix the default site to not mix configuration syntax (closes: #345922)
* Mention apxs2 in the apache2-*-dev long descriptions (closes: #307921)
Files:
bbbbaca2321dd3b7bfd5ca33fc3cbc65 1130 net optional apache2_2.0.55-4.dsc
a77979e4012d85d6e4058a267c7b6ab8 115301 net optional apache2_2.0.55-4.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
iQEVAwUBQ8xQigF4adwMEr3XAQINcAf/cE20NtH/E4pzYpwC+oEm4PylXnhJijjF
+77ghqEZ+pZjC0iWwtKHROM9RevLnVRzeTEC5Fi++MsbT0GDHvujIxoqsLzDYjju
rCeUzW0rWyR7JqT4kgDO70emdgccirTBJIOrUlnhzCNrhoeo5sXAoFYAXm3OxWTN
sN7kGa1D5bBjDCM2Ac/NdYUWxOZ5Mdl/ZSh9g2bHAEjlQFcbybnDIfpctI7fOMnU
L+/2zBspfgNFxtESrJfwatwhmP6HgwbsVa/WSAOZFGt6GA7yireY4Kd1EFh+Ujez
fuyM6i+yscwVS5Ayz3aL0LsN0xw/u7SNn5XfwTB6IcGr2Kvoes4ieg==
=TBPh
-----END PGP SIGNATURE-----
Accepted:
apache2_2.0.55-4.diff.gz
to pool/main/a/apache2/apache2_2.0.55-4.diff.gz
apache2_2.0.55-4.dsc
to pool/main/a/apache2/apache2_2.0.55-4.dsc
More information about the ubuntu-changes-auto
mailing list