[ubuntu/precise] apache2 2.2.21-5ubuntu1 (Accepted)

Chuck Short zulcss at ubuntu.com
Mon Jan 23 14:15:22 UTC 2012


apache2 (2.2.21-5ubuntu1) precise; urgency=low

  * Merge from Debian testing.  Remaining changes:
    - debian/{control, rules}: Enable PIE hardening.
    - debian/{control, rules, apache2.2-common.ufw.profile}: Add ufw profiles.
    - debian/control: Add bzr tag and point it to our tree
    - debian/apache2.py, debian/apache2.2-common.install: Add apport hook.
    - debian/control, debian/ask-for-passphrase, debian/config-dir/mods-available/ssl.conf:
      Plymouth aware passphrase dialog program ask-for-passphrase.

apache2 (2.2.21-5) unstable; urgency=low

  [ Arno Töll ]
  * Fix build failures introduced as regregression by the previous build. Debian
    buildds aren't rebuilding arch:all packages which caused problems for our
    unconditional copying into binary package. I was warned.

apache2 (2.2.21-4) unstable; urgency=low

  [ Stefan Fritsch ]

  * Security: Fix broken patch for CVE-2011-3607 (Integer overflow in
    ap_pregsub).
  * Optimize debian/rules again to improve build time by doing most work in a
    single parallelized "build-%" target.

  [ Arno Töll ]

  * Fix "Suggest removing DefaultType from apache2.conf" change the DefaultType
    from text/plain to None. This lets the browser guess a proper MIME type
    instead of being forced to treat a given file according to our default type
    (Closes: #440058)
  * Fix "add pre-rotate hook to logrotate script" execute scripts in
    /etc/logrotate.d/httpd-prerotate if available (Closes: #590096).
  * Fix "Hide /icons index" Disables indexes on the icon directory. By upgrading
    to Debian's 3.0/quilt source format also images don't need to be generated
    at build time anymore. Hence, the icon date can no longer lead to
    information disclosure (Closes: #649888).
  * Upgrade package to 3.0/quilt.
    + Remove uuencoded images, keep them in their binary format in debian/icons
    + Upgrade to quilt from dpatch and refresh all patches by keeping all hunks
      unchanged. Remove the `001_branding' patch by supplying -DPLATFORM at
      build time where needed Move the 200_cp_suexec.dpatch patch and
      202_suexec-custom.dpatch patch to debian/rules. 200_cp_suexec.dpatch was a
      script, not a patch which is not supported by quilt.
  * Rewrite debian/rules and base it on dh(1).
    + use overrides where possible, replace some debhelper calls by our own
      implementation where needed. That's required since the Apache package is
      compiled in parts several times for each MPM once.
    + move some install operations to the their respective .install files
    + Support dpkg-buildflags now, which also enables by default hardening
      flags. Thus, remove them from their explicit appearance in debian/rules
    + Remove DEB_BUILD_OPTIONS legacy support. It comes for free when using
      dh(1)/dpkg-buildflags(1).
  * Push debhelper compatibility to 8
  * Remove unused Lintian overrides for the Debian source package remove and
    redundant priorities in debian/control.
  * Add myself to Uploaders

Date: Mon, 09 Jan 2012 06:26:31 +0000
Changed-By: Chuck Short <zulcss at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/precise/+source/apache2/2.2.21-5ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 09 Jan 2012 06:26:31 +0000
Source: apache2
Binary: apache2.2-common apache2.2-bin apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-mpm-itk apache2-utils apache2-suexec apache2-suexec-custom apache2 apache2-doc apache2-prefork-dev apache2-threaded-dev apache2-dbg
Architecture: source
Version: 2.2.21-5ubuntu1
Distribution: precise
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Chuck Short <zulcss at ubuntu.com>
Description: 
 apache2    - Apache HTTP Server metapackage
 apache2-dbg - Apache debugging symbols
 apache2-doc - Apache HTTP Server documentation
 apache2-mpm-event - Apache HTTP Server - event driven model
 apache2-mpm-itk - multiuser MPM for Apache 2.2
 apache2-mpm-prefork - Apache HTTP Server - traditional non-threaded model
 apache2-mpm-worker - Apache HTTP Server - high speed threaded model
 apache2-prefork-dev - Apache development headers - non-threaded MPM
 apache2-suexec - Standard suexec program for Apache 2 mod_suexec
 apache2-suexec-custom - Configurable suexec program for Apache 2 mod_suexec
 apache2-threaded-dev - Apache development headers - threaded MPM
 apache2-utils - utility programs for webservers
 apache2.2-bin - Apache HTTP Server common binary files
 apache2.2-common - Apache HTTP Server common files
Closes: 440058 590096 649888
Changes: 
 apache2 (2.2.21-5ubuntu1) precise; urgency=low
 .
   * Merge from Debian testing.  Remaining changes:
     - debian/{control, rules}: Enable PIE hardening.
     - debian/{control, rules, apache2.2-common.ufw.profile}: Add ufw profiles.
     - debian/control: Add bzr tag and point it to our tree
     - debian/apache2.py, debian/apache2.2-common.install: Add apport hook.
     - debian/control, debian/ask-for-passphrase, debian/config-dir/mods-available/ssl.conf:
       Plymouth aware passphrase dialog program ask-for-passphrase.
 .
 apache2 (2.2.21-5) unstable; urgency=low
 .
   [ Arno Töll ]
   * Fix build failures introduced as regregression by the previous build. Debian
     buildds aren't rebuilding arch:all packages which caused problems for our
     unconditional copying into binary package. I was warned.
 .
 apache2 (2.2.21-4) unstable; urgency=low
 .
   [ Stefan Fritsch ]
 .
   * Security: Fix broken patch for CVE-2011-3607 (Integer overflow in
     ap_pregsub).
   * Optimize debian/rules again to improve build time by doing most work in a
     single parallelized "build-%" target.
 .
   [ Arno Töll ]
 .
   * Fix "Suggest removing DefaultType from apache2.conf" change the DefaultType
     from text/plain to None. This lets the browser guess a proper MIME type
     instead of being forced to treat a given file according to our default type
     (Closes: #440058)
   * Fix "add pre-rotate hook to logrotate script" execute scripts in
     /etc/logrotate.d/httpd-prerotate if available (Closes: #590096).
   * Fix "Hide /icons index" Disables indexes on the icon directory. By upgrading
     to Debian's 3.0/quilt source format also images don't need to be generated
     at build time anymore. Hence, the icon date can no longer lead to
     information disclosure (Closes: #649888).
   * Upgrade package to 3.0/quilt.
     + Remove uuencoded images, keep them in their binary format in debian/icons
     + Upgrade to quilt from dpatch and refresh all patches by keeping all hunks
       unchanged. Remove the `001_branding' patch by supplying -DPLATFORM at
       build time where needed Move the 200_cp_suexec.dpatch patch and
       202_suexec-custom.dpatch patch to debian/rules. 200_cp_suexec.dpatch was a
       script, not a patch which is not supported by quilt.
   * Rewrite debian/rules and base it on dh(1).
     + use overrides where possible, replace some debhelper calls by our own
       implementation where needed. That's required since the Apache package is
       compiled in parts several times for each MPM once.
     + move some install operations to the their respective .install files
     + Support dpkg-buildflags now, which also enables by default hardening
       flags. Thus, remove them from their explicit appearance in debian/rules
     + Remove DEB_BUILD_OPTIONS legacy support. It comes for free when using
       dh(1)/dpkg-buildflags(1).
   * Push debhelper compatibility to 8
   * Remove unused Lintian overrides for the Debian source package remove and
     redundant priorities in debian/control.
   * Add myself to Uploaders
Checksums-Sha1: 
 4d3ab48578b0bd58872ba07d7492cdd9837e6b04 2417 apache2_2.2.21-5ubuntu1.dsc
 7165c94afd284e8b4878082b9724018bcf57de93 216019 apache2_2.2.21-5ubuntu1.debian.tar.gz
Checksums-Sha256: 
 1b89d09d89d75f4a90d210cd429cb9d5511f06e6340328dd77bbbef332034f49 2417 apache2_2.2.21-5ubuntu1.dsc
 eaf11e13529f7c059afc0eaa15af1cd3ed4255c123abc77cc9afee0088b3a9d2 216019 apache2_2.2.21-5ubuntu1.debian.tar.gz
Files: 
 d643f17d514b8137135a4a7196c13cd5 2417 httpd optional apache2_2.2.21-5ubuntu1.dsc
 19eb18394794c75359a8454e17dc4c76 216019 httpd optional apache2_2.2.21-5ubuntu1.debian.tar.gz
Original-Maintainer: Debian Apache Maintainers <debian-apache at lists.debian.org>
Original-Vcs-Browser: http://svn.debian.org/wsvn/pkg-apache/trunk/apache2
Original-Vcs-Svn: svn://svn.debian.org/pkg-apache/trunk/apache2

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk8dZ5gACgkQIHZ33voUATtKOACdGknwS+xEliY0IYXfFxjA7+Me
C4wAnihw0Z8XCSdLvORhEFq189BQro8+
=fm6v
-----END PGP SIGNATURE-----


More information about the Precise-changes mailing list