Re: The status of libapache2-mod-perl2

2007-08-16 Thread Adam Conrad
On Wed, Aug 15, 2007 at 09:32:30PM -0500, Gunnar Wolf wrote: > > - Should we hijack/adopt the package, or will its current maintainers > stand up and get it back to life? > - Is there somebody who wants to lead this? > - Pkg-perl and/or Apache groups: Do you agree? :) > - In any other case: Othe

Bug#357561: privilege escalation hole

2007-02-28 Thread Adam Conrad
Joey Hess wrote: > > On the third hand, this bug has documented a security hole with exploit > in apache for about 2 weeks without any reaction from its maintainers, > and was open for many months before that without any reaction from them. > If apache isn't being maintained, it might be better to

Bug#396631: more information

2006-11-15 Thread Adam Conrad
Peter Samuelson wrote: > >> Peter noted that this suggests a deeper problem with libapr, because >> my kernel doesn't support sendfile64() but libapr1's configure script >> decided I had it anyway. > > Hoping (but not promising) to get a tested patch into apr in the next > few hours, Peter Check t

Bug#395853: "Help, I purged a package and now my configuration is gone."

2006-10-29 Thread Adam Conrad
Peter Samuelson wrote: > > It seems reasonable to purge apache2-common _after_ apache 2.2 is > installed. That will work. But you apparently purged it _before_ > upgrading to apache 2.2. That is not reasonable, and will not work. Unfortunately, "apt-get --purge dist-upgrade" will do just this,

Bug#393083: Hijacked website

2006-10-14 Thread Adam Conrad
Stephen Gran wrote: > > Was this a joke? Did I miss something here? Yes. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#388443: apache2: MUST NOT send data in an 304 reply

2006-09-20 Thread Adam Conrad
Christoph Biedl wrote: > > | | header('HTTP/1.0 304 Not Modified'); > | ?> While I can see the argument that apache should perhaps be trimming its own output, you are aware that you can "fix" this in your PHP script by not having that trailing newline in the file, right? I realise some text edi

Bug#387625: please split up the configuration files

2006-09-16 Thread Adam Conrad
Wessel Dankers wrote: > > - All config files must be named *.conf; this to prevent > problems when dpkg creates a foo.conf.dpkg-old file. > The postinst script might want to offer to rename existing > files. Not commenting on the rest of the bug currently, but we already have a patch in apa

Re: Bug#387396: subversion: depend libapr0 >= 2.0.55-4.2 (libdb-4.4 problem)

2006-09-15 Thread Adam Conrad
Peter Samuelson wrote: > > - "Conflicts: libsvn0 (<< 1.4.0)" > - "libaprutil-0 0 libapr0 (>= 2.0.55-4.2)" in the shlibs file > > These two things address the incompatibility from both directions. The > shlibs change would have prevented bug #387396. Probably not worth having the conflict, since

Re: apt problem with libapache-mod-perl

2006-09-13 Thread Adam Conrad
Hoeppner, Stan D. wrote: > > How can I FORCE apt to completely forget about, ignore (pick your > phrase) libapache-mod-perl and install my other packages??!??! You could bypass apt completely and just "dpkg -i whateverftpd.deb", if youreally want to. > P.S. If I knew how to create the .info file

Re: apt problem with libapache-mod-perl

2006-09-13 Thread Adam Conrad
Hoeppner, Stan D. wrote: > > Error: mod_auth_ldap.so does not have a corresponding .info file. > Error: mod_ntlm.so does not have a corresponding .info file. So, where did the above modules come from? If they were hand-compiled, create a .info file for them and your problems will be solved. If

Bug#383267: apache: subprocess post-installation script returned error exit status 10

2006-09-05 Thread Adam Conrad
Bj�rn Mork wrote: > > This bug is also present in the latest security updates for Sarge, > preventing them from being applied. I believe that the fix from > 1.3.34-4 should be backported and distributed as an updated > security fix with an updated version of DSA 1167. > > ii debconf

Bug#358543: apache: fails to install

2006-08-22 Thread Adam Conrad
Mike Koz wrote: > Bug confirmed on unstable with Apache already installed and being > upgraded on the PA-Risc platform. Workaround also works. Hopefully > apache 1.3.34-4 will make it's way to the repositories soon. Err, it's already there, on all architectures. Perhaps you have a stale mirror?

Re: Apache 1 in Etch

2006-08-20 Thread Adam Conrad
Moritz Muehlenhoff wrote: > It has now, but if it's included in Etch it means that the Security Team > has to maintain it until at least June 2009. Historically most of > the vulnerabilities in Apache 1 applied to version 2 as well, so > it's twice the amount of work and should only be done for goo

Re: RFH: PHP unbuildable due conflicting dependencies of apache-dev and apache2-prefork-dev

2006-08-19 Thread Adam Conrad
Ondrej Sury wrote: > > apache-dev depends on libbdb4.4-dev > apache2-prefork-dev depends on libbdb4.3-dev > libbdb4.4-dev conflicts with libbdb4.3-dev http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=383659 ... Adam -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe"

Bug#383659: apache2: please switch to libdb4.4-dev

2006-08-18 Thread Adam Conrad
Andreas Beckmann wrote: > > apache (1.x) recently switched to libdb4.4-dev, but apache2 still uses > libdb4.3-dev. > Now php5 can't be built due to conflicting build depends: libdb4.4-dev > (pulled by apache-dev) and libdb4.3-dev (pulled by apache2-prefork-dev). I know. I'll be moving apache2, p

Bug#366843: apache: same problem here...

2006-08-16 Thread Adam Conrad
Cristian Ionescu-Idbohrn wrote: > Version: 1.3.34-3 > > | dpkg: error processing apache (--configure): > | subprocess post-installation script returned error exit status 10 This is already fixed in 1.3.34-4. ... Adam -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscri

Re: how to add mod_info

2006-06-04 Thread Adam Conrad
nieca-onet wrote: > Witaj debian-apache! > > how to add /usr/lib/apache2/modules/mod_info.so to > /etc/apache2/mods-available directory and > then compile into apache2 using a2enmod mod_info ? > Does "a2enmod info" not do what you want it to do? ... Adam -- To UNSUBSCRIBE, email to [EM

Bug#316321: revisiting the "reload target" issue

2006-05-30 Thread Adam Conrad
Pierre HABOUZIT wrote: > Ping apache2-common maintainers ? > > is there any reason why that bug is rotting in a RC state for 4+ > monthes ? > > I may perform an NMU soon. > Yes, because I'm preparing a 2.0.58 upload which includes several patches to the init scripts, not just this one, so

Re: How to turn off index listing

2006-05-26 Thread Adam Conrad
David Liontooth wrote: > On a fresh installation of apache2 (2.0.55-4), I installed mediawiki1.5. > I'm now unable to turn off index listing. In /etc/apache2/sites-available/default, notice the bit here: Options Indexes FollowSymLinks MultiViews [...] Remove "Indexes", and you're golden.

Bug#368315: apache: [notice] child pid xxxxx exit signal Segmentation fault (11)

2006-05-24 Thread Adam Conrad
[EMAIL PROTECTED] wrote: > Have a look at http://lists.debian.org/debian-user/2005/09/msg00382.html > I've found this message on lists.debian.org. It seems it describe the same > problem but it never got any answer :( Apache can segfault for any number of wonderful reasons. One person reporting

Bug#368610: Log for failed build of libapache2-mod-geoip_1.1.8-1 (dist=unstable)

2006-05-24 Thread Adam Conrad
Martin Michlmayr wrote: > > Sorry, Adam, but ssl-cert still doesn't install - the following happens > when it's installed with debconf priority non-interactive: > >> Automatic build of libapache2-mod-geoip_1.1.8-1 on bilbao by sbuild/sparc 85 > ... >> Setting up ssl-cert (1.0.13) ... >> chgrp: ca

Bug#368610: Log for failed build of libapache2-mod-geoip_1.1.8-1 (dist=unstable)

2006-05-23 Thread Adam Conrad
Adam Conrad wrote: > Martin Michlmayr wrote: >> ... >>> Setting up ssl-cert (1.0.13) ... >>> chgrp: cannot access `/etc/ssl/private/ssl-cert-snakeoil.key': No such file >>> or directory >>> chmod: cannot access `/etc/ssl/private/ssl-cert-snakeoil

Bug#368315: apache: [notice] child pid xxxxx exit signal Segmentation fault (11)

2006-05-21 Thread Adam Conrad
tech wrote: > > my /var/log/apache/error.log is filled with error messages like : > [notice] child pid 15353 exit signal Segmentation fault (11) Please run "apache -X" under gdb and see if you can get a backtrace of the segfault, so we know who's at fault here. Also, a list of modules you have l

Re: Apache configuration and security

2006-05-07 Thread Adam Conrad
Keith Seldon wrote: > > If you goto http://domain or http://domain./ all is fine. Unfortunately, if > you goto http://domain// or append any number of '/' to the uri, then you > will be served with a directory listing instead of the index page. > > I have fixed this localy by editiing /etc/ap

Bug#327139: apache-perl purge ate /etc/apache

2006-03-26 Thread Adam Conrad
Geoff Crompton wrote: > > There is also /var/lib/dpkg/info/apache-perl.list, with the line > "/etc/apache". Does dpkg use this file to remove stuff? Or is everything > to be removed expressed in the apache-perl.*rm scritpts? dpkg removes everything from .list files, *BUT*, it will never remove a

Bug#327139: apache-perl purge ate /etc/apache

2006-03-24 Thread Adam Conrad
Geoff Crompton wrote: > > Do you have any recommendations on how to safely purge apache-perl? I > thought it'd be good to have it documented in this bug report, for > future people that might stumble across this. > > * manually edit files in /var/lib/dpkg/info to remove references to > things be

Bug#327139: apache-perl purge ate /etc/apache

2006-03-23 Thread Adam Conrad
Geoff Crompton wrote: > > ii apache 1.3.33-6sarge1 versatile, high-performance HTTP server > pc apache-perl1.3.9-13.1-1.2 Versatile, high-performance HTTP There's nothing I can do to fix the potato (!) version of apache-perl at this point. ... Adam -- To UNSUBSCRIBE, email to [EM

Bug#298689: What do you gain?

2006-03-19 Thread Adam Conrad
Nick Phillips wrote: > Using a passphrase on your ssl keys should mean that "someone" is unable > to take them and use them elsewhere without your knowledge. You do realise that anyone with root access on your machine while apache is running can just yank the unencrypted key right out of apache's

Bug#298975: Regex problems remain for apache in sarge/amd64

2006-02-22 Thread Adam Conrad
Grant McLean wrote: > > The latest version of apache for amd64 in Sarge seems to be 1.3.33-6 > which does not include the fixes to the regex code. > > This seems to me to be a fairly grave flaw in the stable version. Am I > missing some obvious solution? You're missing that amd64 is not an offi

Re: Apache startup script in /etc/init.d

2006-02-13 Thread Adam Conrad
Didier Gehéniau wrote: > > I found a "bug" in the startup script. We start and stop apache in a cron > job to backup some files. In the startup script "start-stop-daemon" is used, > this command is in "/sbin" in the PATH variable the "/sbin" directory is not > there. Therefore when /etc/init.d/apa

Bug#350286: apache2-common: why is the apache2 pid file not in /var/run/apache2?

2006-01-28 Thread Adam Conrad
Marc Haber wrote: > > why is apache2 configured to write its pid to /var/run/apache2.pid > instead of /var/run/apache2/apache2.pid? Is that an oversight in > packaging or am I missing something? You're missing the fact that, while the current location isn't ideal, it's a serious pain in the ass t

Bug#289868: NMU?

2006-01-28 Thread Adam Conrad
Olaf van der Spek wrote: > > Do you mind if a NMU is done to fix this issue? Isn't it traditional to submit patches before an NMU? How do you propose to fix it? The only real way to fix it is to move the config out of mod_ssl's config and into the default ssl vhost. Which is a bit of a catch 22

Re: To which package should I report this bug?

2006-01-15 Thread Adam Conrad
Christoph Auer wrote: > > I'm currently asking me to which package I should report this bug: > http://bugs.php.net/bug.php?id=19113 > > apache2-mpm-prefork2.0.54-5 > libapache2-mod-php44.3.10-16 I can't reproduce this on unstable, with apache2 2.0.55-3 and either php4 or php5. A

Bug#344072: apache2: Apache 2.2 has been released

2005-12-19 Thread Adam Conrad
Julian Mehnle wrote: > > Apache 2.2 has recently been released: > > http://www.apache.org/dist/httpd/Announcement2.2.html We're well aware of this, and are actually planning to have a small gathering in the new year to polish up the apr1.0/apache2.2 packaging and get it into the archive. ...

Bug#241223: (no subject)

2005-12-11 Thread Adam Conrad
Rikard Bremark wrote: > Linux warzone-web-mysql 2.6.8-2-686 #1 Thu May 19 17:53:30 JST 2005 i686 > GNU/Linux > Apache/2.0.54 (Debian GNU/Linux) PHP/4.3.10-16 Server at www.warzone.nu > Port 80 > > and still not working, a 3.5 gb tar file. ... which is why the bug is still open, and will remain op

Bug#289868: apache2: No keep-alive for MSIE

2005-11-25 Thread Adam Conrad
Olaf van der Spek wrote: > Hi Apache2 maintainers, > > Could you tell me why this bug has not been fixed yet? It most likely will be in my next upload. ... Adam -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#328596: workaround

2005-11-11 Thread Adam Conrad
Renat Sabitov wrote: > After searching in web I found command, that help: > > # fc-cache -f > > Why this command not executed when font packages are just installed? > Erm, it is (or, it's supposed to be, via defoma). If this bug is being caused by a specific font package that isn't running def

Bug#337507: apache2: apache segfault when requesting text file

2005-11-04 Thread Adam Conrad
Brent G. wrote: > > I dont have the slightest clue when this error popped up since it > only happens for a certain file which isn't requested all that often, > but whenever somebody tries to load it, apache then proceeds to > segfault. Can you provide the text file for which this occurs? Furhter

Bug#322348: /etc/init.d/apache script wasn't removed by postrm

2005-11-01 Thread Adam Conrad
A. Costa wrote: > >>>Seconded. It's not installed on my system: >>> >>>% dlocate -s apache | grep Status >>>Status: deinstall ok config-files > [ much confusion about status lines ] I think you're confusing the first and last columns. That "installed | not-installed" stuff goes in the t

Re: Bug on php4.3.10-16 with apache 1.3

2005-10-29 Thread Adam Conrad
[EMAIL PROTECTED] wrote: > > Hi, I've just seen that the function checkdnsrr return always true on my > server whereas on my laptop with Apache2 the function works perfectly. > > This bug is seen also on the dedicated server of a friend, debian stable with > the same PHP version and apache 1.3

Bug#336318: compiling mod_watch in apache2

2005-10-29 Thread Adam Conrad
reassign 336318 wnpp retitle 336318 RFP: libapache2-mod-watch, a vhost monitoring module kthxbye Paul van der Holst wrote: > > Is it possible to add mod_watch: http://www.snert.com/Software/mod_watch/ > into apache2? I'm not going to include random 3rd party modules in the apache2 source package

Re: libapache-mod-per error

2005-10-26 Thread Adam Conrad
Javier Vicente wrote: > > Error: mod_mono.so does not have a corresponding .info file. > > What can I do? I assume you compiled mod_mono.so by hand. See the documentation[1] for how to se up an info file for your module, then you should be able to complete configuration of mod_perl without any

Bug#335438: libsvncpp-dev and libapr0-dev cannot be installed together

2005-10-24 Thread Adam Conrad
Matthias Klose wrote: > > Package: libsvncpp-dev,libapr0-dev > Severity: serious > > that means, that pysvn's build-deps cannot be installed > anymore. Please coordinate, if these these packages should depend on > libdb4.2-dev or libdb4.3-dev. They should depend on libdb4.3-dev (and build against

Re: Bug#334824: logrotate: Postrotate documentation - Why restart?

2005-10-20 Thread Adam Conrad
Kai Hendry wrote: >I discovered a HUP signal causes Apache just to reload the configs. > > > And crash, in certain interesting and curious corner cases. >Though in Debian Unstable's /etc/logrotate.d/apache2 it actually does a >*restart* not a kill -HUP. > >Which in /etc/init.d/apache2 issues a

Re: conf.d or sites-enabled?

2005-10-20 Thread Adam Conrad
Faheem Mitha wrote: > > I have no current plans to use Virtual Hosts, so I was wondering if > there would be any downside to moving the stuff in > sites-enables/default to conf.d, which seems like the obvious place > for it to go. There's no real downside to moving the file anywhere you want, as

Re: Unstable upgrade exp

2005-10-19 Thread Adam Conrad
Kai Hendry wrote: > > Fatal error: Call to undefined function mysql_connect() dpkg-reconfigure php5-mysql Make sure it's enabled in apache2 (if that's what you're using, CGI, apache1, or whatever as appropriate) Restart the webserver (this bit's important, unless you're using CGI) If that doe

Re: Unstable upgrade exp

2005-10-18 Thread Adam Conrad
Kai Hendry wrote: > > bible$ dpkg -L apache2-common | grep init > /etc/init.d > /etc/init.d/apache2 > bible$ cat /etc/init.d/apache2 > cat: /etc/init.d/apache2: No such file or directory > > Big problem was the "/etc/init.d/apache2" could not be found. I did > reinstall apache2-common and still i

Re: apache-perl update?

2005-10-14 Thread Adam Conrad
Evan Carroll wrote: > > Do those that maintain debian have any interest in updating to Apache > 2.0. An apache2-perl package or an update of apache-perl would be > convienient. mod_perl2 is also out now. There's really no need to have a statically-compiled apache2-perl package, just install "apach

Re: Apache2 error with ssl and php4

2005-10-10 Thread Adam Conrad
Com Puter wrote: > I am trying to configure apache2 for a Debian distribution and having > trouble getting ssl and php4 to work. If the loadmodule statement is > included for either of these two modules I get an error like below: > > Syntax error on line 1 of /etc/apache2/mods-enabled/ssl.load: >

Bug#241223: apache2-common: me three?

2005-09-29 Thread Adam Conrad
Mark Nipper wrote: > > I'm having what I assume is the exact same problem. > Automatically built indexes avoid showing files larger than 2GB and > directly trying to GET those files produces a 403 and this in error.log: If you check the apache2 changelog, you'll note that we once turned on

Re: Bug#330276: marked as done ('apache2ctl restart' exits with 0 after 404)

2005-09-28 Thread Adam Conrad
reopen 330276 thanks Debian Bug Tracking System wrote: > . >* Rebuild due to gmp transition. Closes: #330276. Hello, typo. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#330276: 'apache2ctl restart' exits with 0 after 404

2005-09-27 Thread Adam Conrad
Luke Kanies wrote: > > When 'apache2ctl status' is called against a server that does not have > the 'status.cgi' configured, it gets a 404 but then still exits with a 0 > exit code. While in some ways it could legitimately be said to have > verified that the server is at least running, it gives a

Bug#330275: apache2: init script exits with 0 when called incorrectly

2005-09-27 Thread Adam Conrad
Luke Kanies wrote: > > Apache2's init script does not support a 'restart' option It doesn't? It does here. > but when it > is called with that option, it mistakenly exits with a return code of 0, > instead of a code indicating failure. According to the LSB, it should > exit with a 4: Right y

Re: mass bug filing on packages that are blocking use of cdebconf

2005-09-26 Thread Adam Conrad
Joey Hess wrote: > > This is your third and final reminder. I count 542 packages remaining, > down only 9 from last month. I assume most of the people below do not > read debian-devel, so I've taken the librerty of BCCing you all. :-P > > Debian Apache Maintainers >apache2 apache2 will be f

Bug#327269: still problems

2005-09-25 Thread Adam Conrad
Andreas Jellinghaus wrote: > btw, I tried --no-auth-cache and it > does not help at all. > > any other idea? Can you test the packages at http://people.debian.org/~adconrad/apache2-security/ for me? They should fix /a/ bug with SSLVerifyClient and PROPFIND, but I can't be positive if they'll fix

Bug#329045: libapache-mod-perl: Apache segfaults when mod_perl is loaded

2005-09-18 Thread Adam Conrad
Jeff Williams wrote: > > Running gdb gave me: > > Program received signal SIGSEGV, Segmentation fault. > [Switching to Thread 80872 (LWP 10668)] > 0x0f9049c4 in boot_DynaLoader () from /usr/lib/apache/1.3/mod_perl.so Can you run that as "apache -X" in gdb, and get a backtrace? Do you have a

Bug#328212: Apache segfaults on Alpha

2005-09-15 Thread Adam Conrad
Atsuhito Kohda wrote: > > [Tue Sep 13 10:35:02 2005] [notice] Apache/1.3.33 (Debian GNU/Linux) > mod_ssl/2.8.24 OpenSSL/0.9.7g DAV/1.0.3 configured -- resuming normal > operations > [Tue Sep 13 10:35:02 2005] [notice] Accept mutex: sysvsem (Default: sysvsem) > [Tue Sep 13 10:49:01 2005] [notice]

Re: sarge php4/debian problems

2005-09-12 Thread Adam Conrad
Andrew wrote: > Hi All, > > I am getting these errors after running upgrading a system to sarge... > > Error: mod_auth_mysql.so does not have a corresponding .info file. Looks like mod_auth_mysql was installed by hand and doesn't have a .info file. Either create one for it, or (preferably) inst

Bug#327796: apache: [m68k] FTBFS: Segmentation fault ./gen_test_char >test_char.h

2005-09-12 Thread Adam Conrad
Adam Conrad wrote: >Christian T. Steigies wrote: > > >>./gen_test_char >test_char.h >>/bin/sh: line 1: 23424 Segmentation fault ./gen_test_char >test_char.h >> >> > >Already spinning another build on another box to see if it was cosmic r

Bug#327796: apache: [m68k] FTBFS: Segmentation fault ./gen_test_char >test_char.h

2005-09-12 Thread Adam Conrad
Christian T. Steigies wrote: > > ./gen_test_char >test_char.h > /bin/sh: line 1: 23424 Segmentation fault ./gen_test_char >test_char.h Already spinning another build on another box to see if it was cosmic rays. ... Adam -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsu

Bug#327269: apache2 security update breaks ssl+svn

2005-09-09 Thread Adam Conrad
Andreas Jellinghaus wrote: >On Friday 09 September 2005 02:37, Adam Conrad wrote: > > >>I would like a tarball of your /etc/apache2/ >> >if there is anything else I can do to help, please let me know. > > Meh. Yeah, this is actually a neon or svn (not su

Bug#327269: apache2 security update breaks ssl+svn

2005-09-08 Thread Adam Conrad
Andreas Jellinghaus wrote: >Package: apache2 >Version: 2.0.54-5 >Severity: critical > >After upgrading 2.0.54-4 to 2.0.54-5 svn+ssl is broken: > >subversion client (e.g. checkout): >svn: PROPFIND request failed on '/svn/test' >svn: PROPFIND of '/svn/test': Could not read status line: SSL error: ss

Bug#327210: apache2: CAN-2005-2700

2005-09-08 Thread Adam Conrad
Juergen Kreileder wrote: > Package: apache2 > Version: 2.0.54-4 > Severity: critical > Tags: security, fixed-upstream > > See http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2700 An update is already in the works for this. ... Adam -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with

Bug#326694: [ham] Re: Bug#326694: apache-ssl won't run .php files

2005-09-05 Thread Adam Conrad
Kristis Makris wrote: > On Mon, 2005-09-05 at 17:45 +1000, Adam Conrad wrote: >> >>Is "libapache-mod-php4" actually installed on your system? Do you get >>any output in apache's error log when you start it? You didn't answer this bit ---^ > Yes it is.

Bug#326435: CAN-2005-2728: DoS through overly long Range values passed to the byte-range filter

2005-09-03 Thread Adam Conrad
Moritz Muehlenhoff wrote: > Package: apache2 > Severity: important > Tags: security > > CAN-2005-2728 describes a DoS vulnerability through overly long values > in the Range field. Please see > http://issues.apache.org/bugzilla/show_bug.cgi?id=29962 > for a more complete description and a patch.

Bug#325594: apache2: Unable to restart after security upgrade

2005-08-29 Thread Adam Conrad
Olaf van der Spek wrote: > Package: apache2 > Version: 2.0.54-4 > Severity: normal > > # invoke-rc.d apache2 start > Starting web server: Apache2(98)Address already in use: make_sock: could not > bind to address [::]:443 > no listening sockets available, shutting down > Unable to open logs > invo

Re: CAN-2005-1344: Buffer overflow in htdigest

2005-07-18 Thread Adam Conrad
Martin Schulze wrote: > > Umh... Did anybody bother to check yet? That's what all of these uploads were about. Did the woody when never actually get uploaded? http://cerberus.0c3.net/~adconrad/apache-sec/ ... Adam -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe"

Bug#317003: libapache-mod-gzip, libapache-mod-dav and apache-ssl fail to install

2005-07-05 Thread Adam Conrad
Rolf Leggewie wrote: > > The error returned is from dpkg that the post-install script exited with > error 10. Is anything printed other than this error? Perhaps some errors from apache-modconf, dealing with modules having broken (or nonexistant) .info files? ... Adam -- To UNSUBSCRIBE, emai

Re: Regarding ASF Bugzilla Bug 35555 and Debian Apache package

2005-06-30 Thread Adam Conrad
Nicklas Bondesson wrote: > > I just want to make sure that nothing hinders this submition (licence > etc.). Debian's general take on patching upstream packages is to license it under "the same license as upstream, whatever that may be", specifically to make it easier to get patches accepted upstre

Re: Bug#316342: Acknowledgement (apache2-util must depend on libtasn1-0 and libgcrypt1)

2005-06-30 Thread Adam Conrad
Uhm, these dependencies are pulled in via our use if libldap2, which depends on libgnutls which, in turn, depends on those libs. It's definitely not an apache2 bug. Furthermore, I'm completely baffled about the "libgnutls.so.7" output in your ldd call, since libldap2 in all of Sarge, Etch, and Si

Bug#316303: apache2-common: apache2ctl -k stop not being used - faulty init.d/apache2 logic

2005-06-29 Thread Adam Conrad
Jason Rhinelander wrote: > > if `apache2 -t > /dev/null 2>&1`; then > > will always be false, due to being in backticks. lucifer:~# if `apache2 -t 2>/dev/null`; then echo "YAY, IT WORKS"; else echo "BROKEN"; fi YAY, IT WORKS lucifer:~# echo "RANDOM CRAP" >> /etc/apache2/apache2.conf lucifer:~# if

Bug#316173: apache2: Security issues in HTTP proxy responses with both Transfer-Encoding and Content-Length headers

2005-06-28 Thread Adam Conrad
Steve Kemp wrote: > > Can I be the first to say that I don't understand the nature of this > issue? The description sounds reasonably straightforward, though I'd classify this as a vulnerability of pretty low importance, from a "will people be exploited by this" viewpoint. > Is this also present

Re: upgrade from woody to sarge

2005-06-27 Thread Adam Conrad
Mario Ohnewald wrote: > > Warning: Illegal offset type > in /usr/share/phpmyadmin/libraries/grab_globals.lib.php on line 71 I give twenty-to-one odds that you have the ZendOptimizer installed, and it needs to be updated to match the current version of PHP on your system. I can't really do anythin

Bug#315927: apache(-common?): postrm may only use essential stuff on purge

2005-06-27 Thread Adam Conrad
Lars Wirzenius wrote: > > In the source package the file debian/pkgtemplates/flavours.postrm > contains calls to ucf, but when the package is purged, ucf might not be on > the system anymore. (This may apply to other packages built from the > apache source package. I didn't check.) Thanks for the

Bug#286138: same for mod_disk_cache

2005-06-17 Thread Adam Conrad
severity 286138 wishlist retitle 286138 better module dependency handling needed merge 286138 273929 kthxbye martin f krafft wrote: > > seamus% /usr/sbin/apache2ctl configtest Syntax error on line 1 of > /etc/apache2/mods-enabled/disk_cache.load: > Cannot load /usr/lib/apache2/modules/mod_disk_cac

Bug#312810: Apache2 consumes 100% CPU after several LDAP authenticated requests

2005-06-10 Thread Adam Conrad
Geert Nijpels wrote: > > It looks like this problem is related to bug #307567. Apache starts > consuming 100% CPU after some requests. Restarting Apache lets it serve > pages for a few minutes again. > > Downgrading to apache* 2.0.54-2 fixed the problem. We use > apache2-mpm-prefork on an up-to-dat

Re: apache modules (Error: mod_macro.so does not have a corresponding .info file.)

2005-06-09 Thread Adam Conrad
Mark Lowe wrote: > > Error: mod_macro.so does not have a corresponding .info file. If you read the list archives, you'd notice we've addressed this a few times. /usr/lib/apache/1.3/mod_macro.so was either hand-compiled, or came from a broken package. If the former, please see /usr/share/doc/apac

Re: problems removing libapache-mod-perl

2005-06-09 Thread Adam Conrad
Jacob Bresciani wrote: > > Error: java.so does not have a corresponding .info file. So, where did /usr/lib/apache/1.3/java.so come from? If it's from a package, is there an updated package somewhere that had a proper .info file? If it was compiled by hand, can you create an .info file for it? (S

Bug#311968: apache2-common: can't be accessed from ipv4 clients in default configuration

2005-06-04 Thread Adam Conrad
Torok Edwin wrote: > > If I run apache2 using it's default config, it binds to the ipv6 address, > even though I haven't set up an ipv6 connection (sit0 is down, only eth0, > ppp0, and lo is up). This is definitely a new one on me. Given that no one else has ever reported this bug before, and pre

Re: Apache upload speed

2005-05-29 Thread Adam Conrad
Cliff wrote: > My DSL can do 256k upload but I can only get 30k upload with Apache. Is > there a way to control the upload speed of apache or does it have to be > done in the OS? If so does anyone know how to do that? Apache will happily saturate your available bandwidth, if there's no other conte

Bug#310650: Acknowledgement (apache2-mpm-prefork: SSLUserName directive does not change REMOTE_USER)

2005-05-25 Thread Adam Conrad
forwarded 310650 http://issues.eu.apache.org/bugzilla/show_bug.cgi?id=31418 thanks Eric Jonas wrote: > > REMOTE_USER = Erica H Peterson > Apache/2.0.52 (Debian GNU/Linux) DAV/2 SVN/1.1.4 mod_ssl/2.0.52 > > REMOTE_USER = /C=US/ST=Massachusetts/O=Massachusetts Institute of > Technology/OU=Client CA

Bug#298689: Bug with Debian Apache2 logrotate script

2005-05-23 Thread Adam Conrad
Heiko Stübner wrote: > > While obtaining another certificate I found the perfect example :-) Take > a rented server (cheaper traffic than hosting it yourself) for an > online-shop, hosted somewhere and no one knows who can get access to it > directly on the console (like root=/bin/bash kernel comma

Bug#298689: Bug with Debian Apache2 logrotate script

2005-05-16 Thread Adam Conrad
Heiko St?wrote: > > Basically the problem is the postrotate command which calls > /etc/init.d/apache2 restart and since version 2.0.53-5 this fully stops > apache und then starts it again, killing the whole thing if the apache > uses an SSL certificate with passphrase since nobody can enter it. Th

Bug#308648: apache2-mpm-prefork: Childs segfaults

2005-05-11 Thread Adam Conrad
Emmanuel Lacour wrote: > > I'm using it with auth_ldap, ssl and php4 under sarge. After my last > upgrade, I saw some segfaults. I looked in the BTS and found some segfault > with auth_ldap fixed in sid version (2.0.54-3), so I did an aptitude > install apache2-mpm-prefork/unstable and I always hav

Bug#307584: apache2-common: Rename /etc/apache2/conf.d/apache2-doc to apache2-doc.conf

2005-05-04 Thread Adam Conrad
Matthias Julius wrote: > > Now I have investigated that issue and found out that this change in > the apache2 config has been made by the phpmyadmin package. There a bug > has already been filed under #307275. I apologise for being short with you. I was not aware of #307275 until it was brought

Bug#307567: apache2-common: Apache processes locks up after some queries

2005-05-04 Thread Adam Conrad
tags 307567 pending thanks Gabor Lenart wrote: > > In case of pages which require a few seconds to responds (because of > active content complex enough to generate in only seconds) often locks, > eating 100% of idle CPU. After some hours, many "dead" processes causes to > rise load above eg 70, an

Re: CAN-2005-1344: Buffer overflow in htdigest

2005-04-29 Thread Adam Conrad
Martin Schulze wrote: > Are you aware of this: > > > http://www.lucaercoli.it/advs/htdigest.txt > http://www.securiteam.com/unixfocus/5EP061FEKC.html > http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1344 We are now. :) Do you have a patch, or should I fix it myself when I get home from t

Re: how to know if start, restart is successful?

2005-04-27 Thread Adam Conrad
Maria Guarch wrote: > > I'm trying to do a webpage like webmin for my project. I just wanted to > know if the daemons get restarted, started, etc .. when I do it from the > web. The /usr/sbin/apache2ctl returns the same as the init script... They > both don't reveal the real status.. Even the resul

Bug#235653: Status of Bug 235653?

2005-04-20 Thread Adam Conrad
Mike McCallister wrote: > What is the status of bug 235653 (http://bugs.debian.org/235653), to > enable mod_auth_ldap to use TLS/SSL? Based on the response from March 1 > 2004, it sounds like it was intended to be fixed in short order, but > this bug is still open. Is it likely to be fixed any ti

Bug#305302: apache2: segfaults when a websvn repository URL is accessed

2005-04-18 Thread Adam Conrad
reassign 305302 php4 thanks Robin wrote: > Program received signal SIGSEGV, Segmentation fault. > [Switching to Thread 1079495520 (LWP 10557)] > 0x406f2470 in mbfl_filt_conv_wchar_ascii () > from /usr/lib/apache2/modules/libphp4.so A full backtrace would be nice (type "bt" after the SEGV). ... A

Bug#305302: apache2: segfaults when a websvn repository URL is accessed

2005-04-18 Thread Adam Conrad
robin wrote: > > I have apache2 installed along with PHP and WebSVN (all from testing). > Currently, when I access a websvn URL, the apache instance crashes with > a segmentation fault. And what versions of libapache2-mod-php4 and websvn do you have installed? If you upgrade everything to unstabl

Bug#305242: Oops, here's the fix.

2005-04-18 Thread Adam Conrad
Rodney Gordon II wrote: > > suexec2 should be set root:www-data Yes, obviously I was asleep/retarded at the time. Will upload a fixed package today. Sorry for the breakage. ... Adam -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTE

Bug#285337: Large file support disabled in this build

2005-04-14 Thread Adam Conrad
Ian Chiew said: > > The following line in debian/rules is commented out: > > #AP2_CONFLAGS += -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 We know. > Without it, the apr_off_t type used internally by Apache will be only > 32-bits wide, thus causing the reported problem. We know. > I realize that

Bug#304427: apache: Segfault after upgrade

2005-04-12 Thread Adam Conrad
Csillag Kristof said: > > > Program received signal SIGSEGV, Segmentation fault. > [Switching to Thread -1209165632 (LWP 23260)] > 0xb782d324 in ERR_add_error_data () from > /usr/lib/i686/cmov/libcrypto.so.0.9.7 Do you have both php4-pgsql and php4-imap installed? What happens if you swap the ord

Bug#303707: apache2: Link to manual from default page is broken(404)

2005-04-08 Thread Adam Conrad
Idan Sofer said: > > In the default "welcome" page, there is a link to apache's documentation, > which points to: /manual/ It does, however, work if you have the "apache2-doc" package installed (and restart apache2). Leaving this open as a note that we should patch the welcome page to mention th

Bug#301965: apache-ssl segmentation fault when gracefull restart (SIGUSR1)

2005-03-29 Thread Adam Conrad
Laurent GUINCHARD said: > > The apache-ssl package crash every sunday when the log rotate is > executed. After some debug, it seems crash when we do a gracefull restart > of the apache daemon : kill -USR1 or /etc/init.d/apache-ssl reload Do you have php4 installed? If so, could you upgrade libapa

Bug#301756: horde2: Horde doesn't start; just a blank page. Apache log: 'child pid **** exit signal Segmentation fault (11)'

2005-03-28 Thread Adam Conrad
Ola Lundqvist said: > On Mon, Mar 28, 2005 at 01:42:02AM -0300, Luis Nogueira wrote: >> >> Apache and MySQL run ok, but horde doesn't start. Just a blank page. On >> Apache >> log: "child pid exit signal Segmentation fault (11)" for every >> attempt of reloading http://website/horde2/, while /

Bug#301400: apache2 is started upon package update

2005-03-25 Thread Adam Conrad
Martin Godisch said: > > apache2 is started upon package update even if it wasn't running before > because /etc/rcx.d/S91apache2 was removed. This shouldn't happen, as we use invoke-rc.d in our postinst, which checks the current runlevel, and won't start apache2 unless the symlink is present for t

Bug#301266: Always advertises 'Debian GNU/Linux'

2005-03-25 Thread Adam Conrad
Robert Millan said: > >> Why don't we just put "(Debian)" in instead? >> > > There's a reason because hardcoding "Linux" is wrong: Debian supports > (or at least intends to support) other kernels. I can't see a reason why > hardcoding "GNU" would be wrong, though. So in this case maybe you want

Bug#301155: ssl.conf won't run

2005-03-23 Thread Adam Conrad
Dan Woodard said: > > The file /usr/share/doc/apache2/examples/ssl.conf encloses the virtual > host definition in . However there's no > simple way to define SSL since in Debian apache2 is started with > apache2ctl. If you start apache2 with the init script, SSL is defined every time. Not

  1   2   >