[Bug 259827] [NEW] Please sync apache2 2.2.9-7 (main) from Debian unstable (main).

[Kees Cook]

Public bug reported:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 affects ubuntu/apache2
 status confirmed
 importance wishlist
 subscribe ubuntu-archive

Please sync apache2 2.2.9-7 (main) from Debian unstable (main).

Changelog since current intrepid version 2.2.9-3:

apache2 (2.2.9-7) unstable; urgency=low

  * Fix XSS in mod_proxy_ftp (CVE-2008-2939).
  * Fix mod_proxy_http losing the query string with noescape (PR 45247).
  * Make the balancer manager work in Opera and MSIE (PR 45578).
  * Fix mod_headers "edit" removing multiple headers with the same name (PR
    45333).
  * Also describe how to get a backtrace from a running process in
    README.backtrace.

 -- Stefan Fritsch <sf at debian.org>  Fri, 08 Aug 2008 19:27:40 +0200

apache2 (2.2.9-6) unstable; urgency=high

  * Urgency high for RC bug fix.
  * Fix SIGBUS on SPARC by preventing gcc from optimizing some memcpy calls
    away. (Closes: #485525)

 -- Stefan Fritsch <sf at debian.org>  Sun, 20 Jul 2008 10:17:19 +0200

apache2 (2.2.9-5) unstable; urgency=medium

  * Urgency medium to get this into testing before the freeze.
  * Remove IPv6 patch that was necessary for very old kernels but creates
    problems on systems with current kernels and net.ipv6.bindv6only = 1.
    Apache will now always create its sockets with IPV6_V6ONLY set to 0.
    (Closes: #391280)

 -- Stefan Fritsch <sf at debian.org>  Mon, 07 Jul 2008 21:20:48 +0200

apache2 (2.2.9-4) unstable; urgency=low

  * Make postinst more quiet. (Closes: #489153)
  * Add Turkish language support. (Closes: #489224)
  * Remove duplicate comments in sites-available/default-ssl. (Closes: #489383)
  * Describe in NEWS.Debian how to revert to the old NameVirtualHost config.
    (Closes: #489215)
  * Redirect apache2 bug reports to apache2.2-common, to get useful dependency
    information.

 -- Stefan Fritsch <sf at debian.org>  Sun, 06 Jul 2008 10:38:37 +0200


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Kees Cook <kees at outflux.net>

iEYEARECAAYFAkisWvAACgkQH/9LqRcGPm2E9ACfd8YL2q3zbzVHnmf4MSW1srG5
Qf8An1MbrPP5qxIMlg9gCKiKVwr3EwJO
=GMe/
-----END PGP SIGNATURE-----

** Affects: apache2 (Ubuntu)
     Importance: Wishlist
         Status: Confirmed

-- 
Please sync apache2 2.2.9-7 (main) from Debian unstable (main).
https://bugs.launchpad.net/bugs/259827
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in ubuntu.