Bug#570740: apache: log file injection

Package: apache2 Severity: normal Tags: security Hi, the following issues were dislcosed in 2003 for apache, but they just got CVE numbers a few days ago. I haven't checked whether the latest version of apache2 is affected, and if it isn't, please close this bug. The problem actually seems rather

Bug#570699: apache2: httpd.conf include is overriding by other includes.

Package: apache2.2-common Version: 2.2.9-10+lenny6 Severity: important Tags: l10n localization added to httpd.conf is overriden by other includes. -- Package-specific info: List of enabled modules from 'apache2 -M': alias auth_basic authn_file authz_default authz_groupfile authz_host authz_us

Bug#570228: marked as done (apache2.2-common: Small mistake in polish translation of 404 error page)

Your message dated Sat, 20 Feb 2010 11:47:48 + with message-id and subject line Bug#570228: fixed in apache2 2.2.14-7 has caused the Debian Bug report #570228, regarding apache2.2-common: Small mistake in polish translation of 404 error page to be marked as done. This means that you claim th

Bug#257945: marked as done (apache2-common: wrong behaviour when downloading .php files using webdav and mod_dav)

Your message dated Sat, 20 Feb 2010 11:47:48 + with message-id and subject line Bug#257945: fixed in apache2 2.2.14-7 has caused the Debian Bug report #257945, regarding apache2-common: wrong behaviour when downloading .php files using webdav and mod_dav to be marked as done. This means that

apache2_2.2.14-7_i386.changes ACCEPTED

Accepted: apache2-dbg_2.2.14-7_i386.deb to main/a/apache2/apache2-dbg_2.2.14-7_i386.deb apache2-doc_2.2.14-7_all.deb to main/a/apache2/apache2-doc_2.2.14-7_all.deb apache2-mpm-event_2.2.14-7_i386.deb to main/a/apache2/apache2-mpm-event_2.2.14-7_i386.deb apache2-mpm-itk_2.2.14-7_i386.deb

Processing of apache2_2.2.14-7_i386.changes

apache2_2.2.14-7_i386.changes uploaded successfully to localhost along with the files: apache2_2.2.14-7.dsc apache2_2.2.14-7.diff.gz apache2-doc_2.2.14-7_all.deb apache2.2-common_2.2.14-7_i386.deb apache2.2-bin_2.2.14-7_i386.deb apache2-mpm-worker_2.2.14-7_i386.deb apache2-mpm-prefork

Processed: retitle 503069 to mod_rewrite bug with file-system path as substitution ..., tagging 494768

Processing commands for cont...@bugs.debian.org: > retitle 503069 mod_rewrite bug with file-system path as substitution Bug #503069 [apache2-mpm-worker] Apache 2.2.3-4+etch5 (apache2-mpm-worker) mod_rewrite BUG Changed Bug title to 'mod_rewrite bug with file-system path as substitution' from 'Ap

Bug#488333: marked as done (apache2.2-common: mod_speling no longer works on nested directories)

Your message dated Sat, 20 Feb 2010 11:48:37 +0100 with message-id <201002201148.37309...@sfritsch.de> and subject line fixed in lenny, etch is at end-of-life has caused the Debian Bug report #488333, regarding apache2.2-common: mod_speling no longer works on nested directories to be marked as done

Bug#478491: marked as done (PUT/If-match (etag) handling seems to be broken)

Your message dated Sat, 20 Feb 2010 11:49:04 +0100 with message-id <201002201149.04701...@debian.org> and subject line fixed in lenny, etch is at end-of-life has caused the Debian Bug report #478491, regarding PUT/If-match (etag) handling seems to be broken to be marked as done. This means that yo

Bug#500131: marked as done (apache2-mpm-prefork: custom ErrorDocument 500 directive sends empty response body with mpm-prefork)

Your message dated Sat, 20 Feb 2010 11:45:54 +0100 with message-id <201002201145.54337...@debian.org> and subject line fixed in lenny, etch is at end-of-life has caused the Debian Bug report #500131, regarding apache2-mpm-prefork: custom ErrorDocument 500 directive sends empty response body with m

Processed: tagging 570228

Processing commands for cont...@bugs.debian.org: > tags 570228 pending Bug #570228 [apache2.2-common] apache2.2-common: Small mistake in polish translation of 404 error page Added tag(s) pending. > thanks Stopping processing here. Please contact me if you need assistance. Debian bug tracking sy