[ubuntu/wily-proposed] apache2 2.4.12-2ubuntu1 (Accepted)

Fri May 29 09:00:19 UTC 2015

apache2 (2.4.12-2ubuntu1) wily; urgency=medium

  * Merge from Debian unstable. Remaining changes:
    - debian/{control, apache2.install, apache2-utils.ufw.profile,
      apache2.dirs}: Add ufw profiles.
    - debian/apache2.py, debian/apache2-bin.install: Add apport hook.
    - Add dep8 tests.
    - debian/rules: Fix cross-building by passing
      DEB_{HOST,BUILD}_GNU_TYPE to configure.
    - debian/patches/086_svn_cross_compiles: Backport several cross
      fixes from upstream
    - d/index.html: replace Debian with Ubuntu on default page.
    - Allow "triggers-awaited" and "triggers-pending" states in addition
      to "installed" when determining whether to defer actions or
      process deferred actions.
  * Drop patches (applied upstream):
    - d/p/split-logfile.patch
    - d/p/CVE-2015-0228.patch
  * Drop changes (superceded in Debian):
    - Cherry-pick versioned build-depend on dpkg from Debian for correct
      dpkg-maintscript-helper symlink_to_dir support.
  * Drop changes (adopted in Debian):
    - d/control, d/config-dir/mods-available/ssl.conf,
      d/ask-for-passphrase, d/apache2.install: Plymouth aware passphrase
      dialog program ask-for-passphrase.
  * Fix cross-building configure line in d/rules, which had bit-rotted in
    previous merges.

apache2 (2.4.12-2) unstable; urgency=medium

  [ Jean-Michel Nirgal Vourgère ]
  * d/control:
    + Update Vcs-Browser.
  * d/copyright:
    + Change d/debhelper/dh_apache2 to dh_apache2.in.
    + Drop paragraph about inexistant itk patches.

  [ Stefan Fritsch ]
  * Remove all the transitional packages:
    apache2-mpm-worker, apache2-mpm-prefork, apache2-mpm-event,
    apache2-mpm-itk, apache2.2-bin, apache2.2-common,
    libapache2-mod-proxy-html, libapache2-mod-macro, apache2-suexec
    This also fixes the dependency problems caused by a recent version
    of debhelper (see #784803).

apache2 (2.4.12-1) unstable; urgency=medium

  * New upstream version
  * Add a patch for CVE-2015-0253 which was introduced in 2.4.11 which
    was never shipped in Debian.
  * Ship mod_proxy_html's default config file. Closes: #782022
  * Fix typo in dh_apache2 man page. Closes: #781032

apache2 (2.4.10-11) unstable; urgency=medium

  * core: Fix -D[efined] or <Define>[d] variables lifetime accross restarts.
    This could cause all kinds of strange behavior. PR 56008. PR 57328
  * mpm_event: Fix process deadlock when shutting down a worker. PR 56960
  * mpm_event: Fix crashes due to various race conditions. Closes: #779078

apache2 (2.4.10-10) unstable; urgency=medium

  * CVE-2015-0228: mod_lua: Fix denial of service vulnerability in
    wsupgrade().
  * Fix setup-instance example script to handle a2enconf/a2disconf.
    LP: #1430936
  * Tweak mention of mod_access_compat in NEWS.Debian. The module does
    not really work in practice.

Date: Thu, 28 May 2015 16:34:00 +0000
Changed-By: Robie Basak <robie.basak at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/apache2/2.4.12-2ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 28 May 2015 16:34:00 +0000
Source: apache2
Binary: apache2 apache2-data apache2-bin apache2-utils apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-dbg
Architecture: source
Version: 2.4.12-2ubuntu1
Distribution: wily
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Robie Basak <robie.basak at ubuntu.com>
Description:
 apache2    - Apache HTTP Server
 apache2-bin - Apache HTTP Server (modules and other binary files)
 apache2-data - Apache HTTP Server (common files)
 apache2-dbg - Apache debugging symbols
 apache2-dev - Apache HTTP Server (development headers)
 apache2-doc - Apache HTTP Server (on-site documentation)
 apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec
 apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec
 apache2-utils - Apache HTTP Server (utility programs for web servers)
Closes: 779078 781032 782022
Launchpad-Bugs-Fixed: 1430936
Changes:
 apache2 (2.4.12-2ubuntu1) wily; urgency=medium
 .
   * Merge from Debian unstable. Remaining changes:
     - debian/{control, apache2.install, apache2-utils.ufw.profile,
       apache2.dirs}: Add ufw profiles.
     - debian/apache2.py, debian/apache2-bin.install: Add apport hook.
     - Add dep8 tests.
     - debian/rules: Fix cross-building by passing
       DEB_{HOST,BUILD}_GNU_TYPE to configure.
     - debian/patches/086_svn_cross_compiles: Backport several cross
       fixes from upstream
     - d/index.html: replace Debian with Ubuntu on default page.
     - Allow "triggers-awaited" and "triggers-pending" states in addition
       to "installed" when determining whether to defer actions or
       process deferred actions.
   * Drop patches (applied upstream):
     - d/p/split-logfile.patch
     - d/p/CVE-2015-0228.patch
   * Drop changes (superceded in Debian):
     - Cherry-pick versioned build-depend on dpkg from Debian for correct
       dpkg-maintscript-helper symlink_to_dir support.
   * Drop changes (adopted in Debian):
     - d/control, d/config-dir/mods-available/ssl.conf,
       d/ask-for-passphrase, d/apache2.install: Plymouth aware passphrase
       dialog program ask-for-passphrase.
   * Fix cross-building configure line in d/rules, which had bit-rotted in
     previous merges.
 .
 apache2 (2.4.12-2) unstable; urgency=medium
 .
   [ Jean-Michel Nirgal Vourgère ]
   * d/control:
     + Update Vcs-Browser.
   * d/copyright:
     + Change d/debhelper/dh_apache2 to dh_apache2.in.
     + Drop paragraph about inexistant itk patches.
 .
   [ Stefan Fritsch ]
   * Remove all the transitional packages:
     apache2-mpm-worker, apache2-mpm-prefork, apache2-mpm-event,
     apache2-mpm-itk, apache2.2-bin, apache2.2-common,
     libapache2-mod-proxy-html, libapache2-mod-macro, apache2-suexec
     This also fixes the dependency problems caused by a recent version
     of debhelper (see #784803).
 .
 apache2 (2.4.12-1) unstable; urgency=medium
 .
   * New upstream version
   * Add a patch for CVE-2015-0253 which was introduced in 2.4.11 which
     was never shipped in Debian.
   * Ship mod_proxy_html's default config file. Closes: #782022
   * Fix typo in dh_apache2 man page. Closes: #781032
 .
 apache2 (2.4.10-11) unstable; urgency=medium
 .
   * core: Fix -D[efined] or <Define>[d] variables lifetime accross restarts.
     This could cause all kinds of strange behavior. PR 56008. PR 57328
   * mpm_event: Fix process deadlock when shutting down a worker. PR 56960
   * mpm_event: Fix crashes due to various race conditions. Closes: #779078
 .
 apache2 (2.4.10-10) unstable; urgency=medium
 .
   * CVE-2015-0228: mod_lua: Fix denial of service vulnerability in
     wsupgrade().
   * Fix setup-instance example script to handle a2enconf/a2disconf.
     LP: #1430936
   * Tweak mention of mod_access_compat in NEWS.Debian. The module does
     not really work in practice.
Checksums-Sha1:
 5fdc62e48b94154a0e88b356fe5ea5bad07f8bbd 2765 apache2_2.4.12-2ubuntu1.dsc
 bc4681bfd63accec8d82d3cc440fbc8264ce0f17 5054838 apache2_2.4.12.orig.tar.bz2
 788e8b32613419de9bc73c4311579bb665adea24 456656 apache2_2.4.12-2ubuntu1.debian.tar.xz
Checksums-Sha256:
 1e34d8ee8a474eac9df147b589f5a7b9959153bcda95ff8dbc235b191efc4e29 2765 apache2_2.4.12-2ubuntu1.dsc
 ad6d39edfe4621d8cc9a2791f6f8d6876943a9da41ac8533d77407a2e630eae4 5054838 apache2_2.4.12.orig.tar.bz2
 bf0b54bf00733b5ea98a9bb768f1c257225a98c46b6b4123ecc818dbbef3583e 456656 apache2_2.4.12-2ubuntu1.debian.tar.xz
Files:
 e9fc42c50ae9d636a5e36e2e5807384c 2765 httpd optional apache2_2.4.12-2ubuntu1.dsc
 b8dc8367a57a8d548a9b4ce16d264a13 5054838 httpd optional apache2_2.4.12.orig.tar.bz2
 303d1010f520f94338ce37425e7ff0db 456656 httpd optional apache2_2.4.12-2ubuntu1.debian.tar.xz
Original-Maintainer: Debian Apache Maintainers <debian-apache at lists.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCgAGBQJVZ0WPAAoJEOVkucJ1vdUupa4P/RqY0lvoWfrcYhsGjriHeObY
81OejdWr/Vd//obyLpFTAd8Do1G8dClmmbatnsxIWXDPJScqdp9709Q4WOjwkZ/u
pDZPtehoKaPqJyhjiOPrKCAX0AnkNiK49yKuHn71+E5qgfU8PPMqO+1NaNJbdDkI
iI8IGh/25BdTMhifYOD1KIfe9IyE2hiV3d/3bwxot0/BK9pj0Hjct84B4AEpPbh7
hlWiNTEwx3lj9O8tfAmA+DLMRK92o5Xcja325Tl8DZSpn4hwtLeCPdMdOpSBwl1K
0Ne5IDksJkKu4fmjqArsms76ebnwIeSYSYJy0uVwYXJUQ4QxZIZu4SmahjW4ZzQ3
KTCQBnTguO1jR+GzFRgaXUM2QAOq7xkvN1x8tt7mdhHwRmMgMCZU6Mz+9ObmSGxQ
ZloyRd3y9bFitbawguz5htA6LRALpZnqnSFDoUoAHCTJvkkTe+Y2rjgNaAC3EMRd
uhpbWt4NhEevo3gIsyzFX7liTX2F9S8vCMmOowdG3lGd8sRDxqh/sIaOtwaMDrf3
hQb0/unGYKhd1SsN3E3utw9DDuYkCMylpKg50VeQHpr9rHEqzgdS44jS8R+csx0V
bZ+XM867N9XAvmieD5s4nbeXaDuDVuN5F/tlcG9Hqr05j8S74IDEFuZwLP3EXTzJ
IR2nMz60fPEyrmBlopSa
=lbKB
-----END PGP SIGNATURE-----