[ubuntu/bionic-proposed] apache2 2.4.29-1ubuntu1 (Accepted)

Fri Nov 10 16:41:18 UTC 2017

apache2 (2.4.29-1ubuntu1) bionic; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/{control, apache2.install, apache2-utils.ufw.profile,
      apache2.dirs}: Add ufw profiles.
    - debian/apache2.py, debian/apache2-bin.install: Add apport hook.
    - debian/patches/086_svn_cross_compiles: Backport several cross
      fixes from upstream
    - d/index.html, d/icons/ubuntu-logo.png, d/apache2.postrm: replace
      Debian with Ubuntu on default page.
      + d/source/include-binaries: add Ubuntu icon file
    - Correct systemd-sysv-generator behavior by customizing some
      parameters:
      + d/apache2-systemd.conf: add a drop-in file to specify some
        parameters for the systemd unit (type=Forking and
        RemainsAfterExit=no), this allow a correct state synchronisation
        between systemctl status and actual state of apache2 daemon.
      + d/apache2.install: place the apache2-systemd.conf file in the
        correct location.
    - Don't build http2 module (nghttp2 still not in main) (LP 1687454)
      + debian/control: removed libnghttp2-dev Build-Depends (in universe).
      + debian/config-dir/mods-available/http2.load: removed.
      + debian/rules: removed proxy_http2 from configure.
  * Switch back to OpenSSL 1.0 as we don't yet have 1.1:
    - debian/control: switch BuildDepends to libssl1.0-dev
    - debian/control: remove Breaks on gridsite and libapache2-mod-dacs
    - debian/rules: remove openssl virtual package and logic

apache2 (2.4.29-1) unstable; urgency=medium

  [ Stefan Fritsch ]
  * Replace outdated dependency on dh-systemd

  [ Ondřej Surý ]
  * New upstream version 2.4.29
  * Refresh quilt patches
  * Add mod_ssl_md patch needed for libapache2-mod-md (Closes: #877343)
  * Refresh patches on top of upstream release 2.4.29
  * Fix Apache crash on restarts (ASF Bug 61558)
  * Add deconfigure to the list of recognized scripts (Closes: #877524)

apache2 (2.4.27-6) unstable; urgency=high

  * CVE-2017-9798: Don't allow new methods to be registered in .htaccess files
    which could result in HTTP OPTIONS method leaking Apache's server memory.
    Closes: #876109
  * Fix argument escaping in apachectl. Closes: #876384

apache2 (2.4.27-5) unstable; urgency=medium

  * Upload to unstable.
  * Update "Breaks:" for openssl transition.
  * Bump Standards-Version to 4.1.0. No changes needed.

apache2 (2.4.27-4) experimental; urgency=medium

  * Use 'invoke-rc.d' instead of init script in logrotate script.
    Closes: #857607
  * Make the apache-htcacheclean init script actually look into
    /etc/default/apache-htcacheclean for its config. LP: #1691495
  * mime.conf: Guard AddOutputFilter INCLUDES with proper <IfModule>.
    LP: #1675184
  * Use 'service' instead of init script in monit example config.
  * Bump Standards-Version to 4.0.1. Other changes:
    - change package priorities from extra to optional
  * Use libprotocol-http2-perl in autopkgtest.
  * Update test suite to svn r1804214.
  * Various tweaks to the test suite autopkgtest to avoid having to skip
    any test.
  * Also remove -DBUILD_DATETIME and -fdebug-prefix-map from config_vars.mk
    to avoid them being used by apxs.
  * deflate.conf: Remove mention of MSIE6

apache2 (2.4.27-3) experimental; urgency=medium

  * Switch to openssl 1.1. Again closes: #851094
  * Add versioned breaks for gridsite, libapache2-mod-dacs because of
    openssl transition.
  * Provide new apache2-api-20120211-openssl1.1 virtual package and make
    dh_apache2 generate a dependency on it if there is a build-dep on
    apache2-ssl-dev.

Date: Fri, 10 Nov 2017 10:51:46 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/apache2/2.4.29-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 10 Nov 2017 10:51:46 -0500
Source: apache2
Binary: apache2 apache2-data apache2-bin apache2-utils apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-ssl-dev apache2-dbg
Architecture: source
Version: 2.4.29-1ubuntu1
Distribution: bionic
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 apache2    - Apache HTTP Server
 apache2-bin - Apache HTTP Server (modules and other binary files)
 apache2-data - Apache HTTP Server (common files)
 apache2-dbg - Apache debugging symbols
 apache2-dev - Apache HTTP Server (development headers)
 apache2-doc - Apache HTTP Server (on-site documentation)
 apache2-ssl-dev - Apache HTTP Server (mod_ssl development headers)
 apache2-suexec-custom - Apache HTTP Server configurable suexec program for mod_suexec
 apache2-suexec-pristine - Apache HTTP Server standard suexec program for mod_suexec
 apache2-utils - Apache HTTP Server (utility programs for web servers)
Closes: 851094 857607 876109 876384 877343 877524
Launchpad-Bugs-Fixed: 1675184 1691495
Changes:
 apache2 (2.4.29-1ubuntu1) bionic; urgency=medium
 .
   * Merge with Debian unstable. Remaining changes:
     - debian/{control, apache2.install, apache2-utils.ufw.profile,
       apache2.dirs}: Add ufw profiles.
     - debian/apache2.py, debian/apache2-bin.install: Add apport hook.
     - debian/patches/086_svn_cross_compiles: Backport several cross
       fixes from upstream
     - d/index.html, d/icons/ubuntu-logo.png, d/apache2.postrm: replace
       Debian with Ubuntu on default page.
       + d/source/include-binaries: add Ubuntu icon file
     - Correct systemd-sysv-generator behavior by customizing some
       parameters:
       + d/apache2-systemd.conf: add a drop-in file to specify some
         parameters for the systemd unit (type=Forking and
         RemainsAfterExit=no), this allow a correct state synchronisation
         between systemctl status and actual state of apache2 daemon.
       + d/apache2.install: place the apache2-systemd.conf file in the
         correct location.
     - Don't build http2 module (nghttp2 still not in main) (LP 1687454)
       + debian/control: removed libnghttp2-dev Build-Depends (in universe).
       + debian/config-dir/mods-available/http2.load: removed.
       + debian/rules: removed proxy_http2 from configure.
   * Switch back to OpenSSL 1.0 as we don't yet have 1.1:
     - debian/control: switch BuildDepends to libssl1.0-dev
     - debian/control: remove Breaks on gridsite and libapache2-mod-dacs
     - debian/rules: remove openssl virtual package and logic
 .
 apache2 (2.4.29-1) unstable; urgency=medium
 .
   [ Stefan Fritsch ]
   * Replace outdated dependency on dh-systemd
 .
   [ Ondřej Surý ]
   * New upstream version 2.4.29
   * Refresh quilt patches
   * Add mod_ssl_md patch needed for libapache2-mod-md (Closes: #877343)
   * Refresh patches on top of upstream release 2.4.29
   * Fix Apache crash on restarts (ASF Bug 61558)
   * Add deconfigure to the list of recognized scripts (Closes: #877524)
 .
 apache2 (2.4.27-6) unstable; urgency=high
 .
   * CVE-2017-9798: Don't allow new methods to be registered in .htaccess files
     which could result in HTTP OPTIONS method leaking Apache's server memory.
     Closes: #876109
   * Fix argument escaping in apachectl. Closes: #876384
 .
 apache2 (2.4.27-5) unstable; urgency=medium
 .
   * Upload to unstable.
   * Update "Breaks:" for openssl transition.
   * Bump Standards-Version to 4.1.0. No changes needed.
 .
 apache2 (2.4.27-4) experimental; urgency=medium
 .
   * Use 'invoke-rc.d' instead of init script in logrotate script.
     Closes: #857607
   * Make the apache-htcacheclean init script actually look into
     /etc/default/apache-htcacheclean for its config. LP: #1691495
   * mime.conf: Guard AddOutputFilter INCLUDES with proper <IfModule>.
     LP: #1675184
   * Use 'service' instead of init script in monit example config.
   * Bump Standards-Version to 4.0.1. Other changes:
     - change package priorities from extra to optional
   * Use libprotocol-http2-perl in autopkgtest.
   * Update test suite to svn r1804214.
   * Various tweaks to the test suite autopkgtest to avoid having to skip
     any test.
   * Also remove -DBUILD_DATETIME and -fdebug-prefix-map from config_vars.mk
     to avoid them being used by apxs.
   * deflate.conf: Remove mention of MSIE6
 .
 apache2 (2.4.27-3) experimental; urgency=medium
 .
   * Switch to openssl 1.1. Again closes: #851094
   * Add versioned breaks for gridsite, libapache2-mod-dacs because of
     openssl transition.
   * Provide new apache2-api-20120211-openssl1.1 virtual package and make
     dh_apache2 generate a dependency on it if there is a build-dep on
     apache2-ssl-dev.
Checksums-Sha1:
 00b8500366f61b01f6bf162533ada1d08bd2b308 3093 apache2_2.4.29-1ubuntu1.dsc
 c6badd5f9bc3a951026c839d35ac05267612ff61 8638793 apache2_2.4.29.orig.tar.gz
 e17399352ec3931ae99cfa092483bbd49c52e192 719432 apache2_2.4.29-1ubuntu1.debian.tar.xz
 4189b4ce7db52b8c3fa2921ab390822188346208 7700 apache2_2.4.29-1ubuntu1_source.buildinfo
Checksums-Sha256:
 64468788b986153c4457e4f1db0282e9ea1c8b25b52240080504b06f94652466 3093 apache2_2.4.29-1ubuntu1.dsc
 948e4a11278a5954698b880b30f401b1e9ab743713ee2c7280a54dd4ddd87085 8638793 apache2_2.4.29.orig.tar.gz
 84ab11de77533d990136b4d03622a4972d03544f9c8115136183d4eda9051a0b 719432 apache2_2.4.29-1ubuntu1.debian.tar.xz
 0fa6ed541f79877ee8adeb35afcf3dc44b3b5053363ae6f9eaa19bcc08b6e1e1 7700 apache2_2.4.29-1ubuntu1_source.buildinfo
Files:
 3a8a4e17dbe723a839859b520634e1d5 3093 httpd optional apache2_2.4.29-1ubuntu1.dsc
 6380b0856658f07479fdcba9e20294a6 8638793 httpd optional apache2_2.4.29.orig.tar.gz
 c82b7d5bcfac319254ee123e9250dffa 719432 httpd optional apache2_2.4.29-1ubuntu1.debian.tar.xz
 a64d486c82443978d3189a7004c4240c 7700 httpd optional apache2_2.4.29-1ubuntu1_source.buildinfo
Original-Maintainer: Debian Apache Maintainers <debian-apache at lists.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=Cu60
-----END PGP SIGNATURE-----