[ubuntu/karmic] apache2 2.2.12-1ubuntu1 (Accepted)

Chuck Short zulcss at ubuntu.com
Wed Aug 5 12:45:16 BST 2009 

apache2 (2.2.12-1ubuntu1) karmic; urgency=low

  * Merge from debian unstable, remaining changes:
    - debian/{control,rules}: enable PIE hardening.
    - debian/{control, rules, apache2.2-common.ufw.profile}: add ufw profiles.
    - Dropped debian/patches/203_fix-ssl-timeftm-ignored.dpatch.

apache2 (2.2.12-1) unstable; urgency=low

  * New upstream release:
    - Adds support for TLS Server Name Indication (closes: #461917 LP: #184131).
      (The Debian default configuration will be changed to use SNI in a later
      version.)
    - Fixes timefmt config in SSI (closes: #363964).
    - mod_ssl: Adds SSLProxyCheckPeerExpire and SSLProxyCheckPeerCN directives
      to enable stricter checking of remote server certificates.
  * Make mod_deflate not compress the content for HEAD requests. This is a
    similar issue as CVE-2009-1891.
  * Enable hardening compile options.
  * Switch default LogFormat from %b (size of file sent) to %O (bytes actually
    sent) (closes: #272476 LP: #255124)
  * Add the default LANG=C to /etc/apache2/envvars and document it in
    README.Debian (closes: #511878).
  * Enable localized error pages by default if the necessary modules are
    loaded. Move the config for it from apache2.conf to
    /etc/apache2/conf.d/localized-error-pages (closes: #467004). Clarify the
    required order of the aliases in the comment (closes: #196795).
  * Change default for ServerTokens to 'OS', to not announce the exact module
    versions to the world (LP: #205996)
  * Make a2ensite and friends ignore the same filenames as apache does for
    included config files, even if LANG is not C.
  * Merge source packages apache2 and apache2-mpm-itk (current itk version is
    2.2.11-02). This removes the binNMU mess necessary for every apache2 upload
    (closes: #500885, #512084). Add Steinar to Uploaders. Remove apache2-src
    package, which is no longer necessary.
  * Ship our own version of the magic config file (taken from file 4.17-5etch3)
    which is still compatible with mod_mime_magic (closes: #483111).
  * Add ThreadLimit to the default config and put ThreadsPerChild and
    MaxClients into the correct order so that Apache does not complain
    (closes: #495656).
    Also add a configuration block for the event MPM in apache2.conf.
  * Fix HTTP PUT with mod_dav failing to detect an aborted connection
    (closes: #451563).
  * Change references to httpd.conf in apache2-doc to apache2.conf
    (closes: #465393).
  * Clarify the recommended permissions for SSL certificates in README.Debian
    (closes: #512778).
  * Document in README.Debian how to name files in conf.d to avoid conflicts
    with packages (closes: #493252)
  * Remove 2.0 -> 2.2 upgrade logic from maintainer scripts.
  * Remove other_vhosts_access.log on package purge.

Date: Tue, 04 Aug 2009 20:04:24 +0100
Changed-By: Chuck Short <zulcss at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Chuck Short <chuck.short at canonical.com>
https://launchpad.net/ubuntu/karmic/+source/apache2/2.2.12-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Tue, 04 Aug 2009 20:04:24 +0100
Source: apache2
Binary: apache2.2-common apache2.2-bin apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-mpm-itk apache2-utils apache2-suexec apache2-suexec-custom apache2 apache2-doc apache2-prefork-dev apache2-threaded-dev apache2-dbg
Architecture: source
Version: 2.2.12-1ubuntu1
Distribution: karmic
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Chuck Short <zulcss at ubuntu.com>
Description: 
 apache2    - Apache HTTP Server metapackage
 apache2-dbg - Apache debugging symbols
 apache2-doc - Apache HTTP Server documentation
 apache2-mpm-event - Apache HTTP Server - event driven model
 apache2-mpm-itk - multiuser MPM for Apache 2.2
 apache2-mpm-prefork - Apache HTTP Server - traditional non-threaded model
 apache2-mpm-worker - Apache HTTP Server - high speed threaded model
 apache2-prefork-dev - Apache development headers - non-threaded MPM
 apache2-suexec - Standard suexec program for Apache 2 mod_suexec
 apache2-suexec-custom - Configurable suexec program for Apache 2 mod_suexec
 apache2-threaded-dev - Apache development headers - threaded MPM
 apache2-utils - utility programs for webservers
 apache2.2-bin - Apache HTTP Server common binary files
 apache2.2-common - Apache HTTP Server common files
Closes: 196795 272476 363964 451563 461917 465393 467004 483111 493252 495656 500885 511878 512084 512778
Changes: 
 apache2 (2.2.12-1ubuntu1) karmic; urgency=low
 .
   * Merge from debian unstable, remaining changes:
     - debian/{control,rules}: enable PIE hardening.
     - debian/{control, rules, apache2.2-common.ufw.profile}: add ufw profiles.
     - Dropped debian/patches/203_fix-ssl-timeftm-ignored.dpatch.
 .
 apache2 (2.2.12-1) unstable; urgency=low
 .
   * New upstream release:
     - Adds support for TLS Server Name Indication (closes: #461917 LP: #184131).
       (The Debian default configuration will be changed to use SNI in a later
       version.)
     - Fixes timefmt config in SSI (closes: #363964).
     - mod_ssl: Adds SSLProxyCheckPeerExpire and SSLProxyCheckPeerCN directives
       to enable stricter checking of remote server certificates.
   * Make mod_deflate not compress the content for HEAD requests. This is a
     similar issue as CVE-2009-1891.
   * Enable hardening compile options.
   * Switch default LogFormat from %b (size of file sent) to %O (bytes actually
     sent) (closes: #272476 LP: #255124)
   * Add the default LANG=C to /etc/apache2/envvars and document it in
     README.Debian (closes: #511878).
   * Enable localized error pages by default if the necessary modules are
     loaded. Move the config for it from apache2.conf to
     /etc/apache2/conf.d/localized-error-pages (closes: #467004). Clarify the
     required order of the aliases in the comment (closes: #196795).
   * Change default for ServerTokens to 'OS', to not announce the exact module
     versions to the world (LP: #205996)
   * Make a2ensite and friends ignore the same filenames as apache does for
     included config files, even if LANG is not C.
   * Merge source packages apache2 and apache2-mpm-itk (current itk version is
     2.2.11-02). This removes the binNMU mess necessary for every apache2 upload
     (closes: #500885, #512084). Add Steinar to Uploaders. Remove apache2-src
     package, which is no longer necessary.
   * Ship our own version of the magic config file (taken from file 4.17-5etch3)
     which is still compatible with mod_mime_magic (closes: #483111).
   * Add ThreadLimit to the default config and put ThreadsPerChild and
     MaxClients into the correct order so that Apache does not complain
     (closes: #495656).
     Also add a configuration block for the event MPM in apache2.conf.
   * Fix HTTP PUT with mod_dav failing to detect an aborted connection
     (closes: #451563).
   * Change references to httpd.conf in apache2-doc to apache2.conf
     (closes: #465393).
   * Clarify the recommended permissions for SSL certificates in README.Debian
     (closes: #512778).
   * Document in README.Debian how to name files in conf.d to avoid conflicts
     with packages (closes: #493252)
   * Remove 2.0 -> 2.2 upgrade logic from maintainer scripts.
   * Remove other_vhosts_access.log on package purge.
Checksums-Sha1: 
 fde734ffc0214c4d7c0b44194bc8c33f973931db 1880 apache2_2.2.12-1ubuntu1.dsc
 eeded290f2258712ad1cc41a3b2300f1f5bd0980 6678149 apache2_2.2.12.orig.tar.gz
 67aebe8d2b516ce241317729292404c88054257d 178710 apache2_2.2.12-1ubuntu1.diff.gz
Checksums-Sha256: 
 052a6081119ef8a7f31996c5fe441e99b6e89e6f40b2355228baa804bcbf51c1 1880 apache2_2.2.12-1ubuntu1.dsc
 7f455ebb3ae13401e6e96b1caf9bf252292507371c75f1add96bb6349eef437f 6678149 apache2_2.2.12.orig.tar.gz
 d41e767b16958d5bf39d2087f8732dc8a75647669f7afccaae6495bc08ba92d4 178710 apache2_2.2.12-1ubuntu1.diff.gz
Files: 
 52d3106bff92eb67ca53f0646c56a54f 1880 httpd optional apache2_2.2.12-1ubuntu1.dsc
 17f017b571f88aa60abebfe2945d7caf 6678149 httpd optional apache2_2.2.12.orig.tar.gz
 0f983afbe7e0837c850013459cb406a6 178710 httpd optional apache2_2.2.12-1ubuntu1.diff.gz
Launchpad-Bugs-Fixed: 184131 205996 255124
Original-Maintainer: Debian Apache Maintainers <debian-apache at lists.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkp5a1wACgkQIHZ33voUATs2gQCggjtjw9IBDZGXpxQHySci7g8d
GWkAoLRuwIMXXk3BtC9OpLN1ELGw/TBs
=c0qa
-----END PGP SIGNATURE-----

More information about the Karmic-changes mailing list