Your message dated Sun, 01 Jul 2007 19:02:03 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#298689: fixed in apache2 2.2.4-1
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: apache2.2-common
Version: 2.2.3-4
Severity: normal
There are two differents problems, in /etc/init.d/apache2 restart
function you use sleep 10 between start and stop, but 10 seconds is not
enough in the case where some childs cannot be killed easily. So it tries
to stop the server, and tries to start it before it is stopped so it is
not able to start the server. This is not very important if no script are
calling restart.
But /etc/logrotate.d/apache2 does. A good idea should be to use reload
instead of restart. In the first case you may kill legitimate process and
you do at least ten seconds of service outage (or more if the server
doesn't restart...) which may be very bad on high availability services,
in the second case you may loose some lines of logs and it's all.
(needless to say that this happened to me several times)
It may be an easy DOS attack, you just have to overload an apache server
at 6:25 AM, with the overload it is going to take more than 10 seconds to
stop and it will not restart, enjoy !
-- System Information:
Debian Release: 4.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.21.1-grsec
Locale: LANG=en_US.ISO-8859-15, LC_CTYPE=en_US.ISO-8859-15 (charmap=ISO-8859-15)
Versions of packages apache2.2-common depends on:
ii apache2-utils 2.2.3-4 utility programs for webservers
ii libmagic1 4.17-5etch1 File type determination library us
ii lsb-base 3.1-23.1 Linux Standard Base 3.1 init scrip
ii mime-support 3.39-1 MIME files 'mime.types' & 'mailcap
ii net-tools 1.60-17 The NET-3 networking toolkit
ii procps 1:3.2.7-3 /proc file system utilities
apache2.2-common recommends no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: apache2
Source-Version: 2.2.4-1
We believe that the bug you reported is fixed in the latest version of
apache2, which is due to be installed in the Debian FTP archive:
apache2-doc_2.2.4-1_all.deb
to pool/main/a/apache2/apache2-doc_2.2.4-1_all.deb
apache2-mpm-event_2.2.4-1_i386.deb
to pool/main/a/apache2/apache2-mpm-event_2.2.4-1_i386.deb
apache2-mpm-perchild_2.2.4-1_all.deb
to pool/main/a/apache2/apache2-mpm-perchild_2.2.4-1_all.deb
apache2-mpm-prefork_2.2.4-1_i386.deb
to pool/main/a/apache2/apache2-mpm-prefork_2.2.4-1_i386.deb
apache2-mpm-worker_2.2.4-1_i386.deb
to pool/main/a/apache2/apache2-mpm-worker_2.2.4-1_i386.deb
apache2-prefork-dev_2.2.4-1_i386.deb
to pool/main/a/apache2/apache2-prefork-dev_2.2.4-1_i386.deb
apache2-src_2.2.4-1_all.deb
to pool/main/a/apache2/apache2-src_2.2.4-1_all.deb
apache2-threaded-dev_2.2.4-1_i386.deb
to pool/main/a/apache2/apache2-threaded-dev_2.2.4-1_i386.deb
apache2-utils_2.2.4-1_i386.deb
to pool/main/a/apache2/apache2-utils_2.2.4-1_i386.deb
apache2.2-common_2.2.4-1_i386.deb
to pool/main/a/apache2/apache2.2-common_2.2.4-1_i386.deb
apache2_2.2.4-1.diff.gz
to pool/main/a/apache2/apache2_2.2.4-1.diff.gz
apache2_2.2.4-1.dsc
to pool/main/a/apache2/apache2_2.2.4-1.dsc
apache2_2.2.4-1_all.deb
to pool/main/a/apache2/apache2_2.2.4-1_all.deb
apache2_2.2.4.orig.tar.gz
to pool/main/a/apache2/apache2_2.2.4.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Stefan Fritsch <[EMAIL PROTECTED]> (supplier of updated apache2 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sun, 01 Jul 2007 19:57:51 +0200
Source: apache2
Binary: apache2-utils apache2-prefork-dev apache2 apache2-mpm-prefork
apache2-doc apache2-mpm-event apache2.2-common apache2-mpm-worker apache2-src
apache2-threaded-dev apache2-mpm-perchild
Architecture: source all i386
Version: 2.2.4-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Apache Maintainers <[EMAIL PROTECTED]>
Changed-By: Stefan Fritsch <[EMAIL PROTECTED]>
Description:
apache2 - Next generation, scalable, extendable web server
apache2-doc - documentation for apache2
apache2-mpm-event - Event driven model for Apache HTTPD
apache2-mpm-perchild - Transitional package - please remove
apache2-mpm-prefork - Traditional model for Apache HTTPD
apache2-mpm-worker - High speed threaded model for Apache HTTPD
apache2-prefork-dev - development headers for apache2
apache2-src - Apache source code
apache2-threaded-dev - development headers for apache2
apache2-utils - utility programs for webservers
apache2.2-common - Next generation, scalable, extendable web server
Closes: 289289 291841 298689 305933 350286 350822 384682 391817 399056 410331
412580 414429 415698 418536 419539 427050 428887 430116 431048 431125
Changes:
apache2 (2.2.4-1) unstable; urgency=medium
.
[ Stefan Fritsch ]
* Urgency medium for security fix
* Fix CVE-2007-1863: DoS in mod_cache
* New upstream version (Closes: #427050)
- Fixes "proxy: error reading status line from remote server"
(Closes: #410331)
* Fix CVE-2007-1862: mod_mem_cache DoS (introduced in 2.2.4)
* Change logrotate script to use reload instead of restart.
(Closes: #298689)
* chmod o-rx /var/log/apache2 (Closes: #291841)
* chmod o-x suexec (Closes: #431048)
* Update patch for truncated mod_cgi 500 responses from upstream SVN
(Closes: #412580)
* Don't use AddDefaultCharset for our docs (Closes: #414429)
* fix options syntax in sites-available/default (Closes: #419539)
* Move conf.d include to the end of apache2.conf (Closes: #305933)
* Remove log, cache, and lock files on purge (Closes: #428887)
* Ship /usr/lib/cgi-bin (Closes: #415698)
* Add note to README.Debian how to read docs (Closes: #350822)
* Document pid file name (Closes: #350286)
* Update Standards-Version (no changes needed)
* Fix some lintian warnings, add some overrides
* Start apache when doing a "restart" even if it was not running
(Closes: #384682)
* reload config in apache2-doc postinst (Closes: #289289)
* don't fail in prerm if apache is not running (Closes: #418536)
* Suggest apache2-doc and www-browser (Closes: #399056)
* Make init script always display a warning if NO_START=1 since
VERBOSE=yes is not the default anymore (Closes: #430116)
* Replace apache2(8) man page with a more current version
* Add httxt2dbm(8) man page
* Show -X option in help message (Closes: #391817)
* remove sick-hack-to-update-modules
* don't depend on procps on hurd (Closes: #431125)
.
[ Peter Samuelson ]
* Add shlibs:Depends to apache2.2-common.
Files:
d955a3e739fa99cb1f77888ad5003bbf 1210 web optional apache2_2.2.4-1.dsc
3add41e0b924d4bb53c2dee55a38c09e 6365535 web optional apache2_2.2.4.orig.tar.gz
96f3176bc56c349a714801383a1d4619 112875 web optional apache2_2.2.4-1.diff.gz
146c20914af543e1867b0eda3d4ea313 960826 web optional
apache2.2-common_2.2.4-1_i386.deb
c6526f80b48af15e8ec969bc1c0d6b56 436638 web optional
apache2-mpm-worker_2.2.4-1_i386.deb
808dda3ee960d7413e65666f2119db66 433044 web optional
apache2-mpm-prefork_2.2.4-1_i386.deb
8d1e267253a2585dd5a33a0949342aba 437106 web optional
apache2-mpm-event_2.2.4-1_i386.deb
7efe7d585d9757d7505aa4b084e23133 344274 web optional
apache2-utils_2.2.4-1_i386.deb
24cb9e950538b38aa03c0a03ca80a3fd 409942 devel optional
apache2-prefork-dev_2.2.4-1_i386.deb
c3c21c4ab87891784e1a5a2ecefadd6b 410620 devel optional
apache2-threaded-dev_2.2.4-1_i386.deb
1a462b27b232a6b03f199fbeb4a4ece9 276636 web optional
apache2-mpm-perchild_2.2.4-1_all.deb
ceb887c81aef77b77ba4129def54cf68 40848 web optional apache2_2.2.4-1_all.deb
0de2ca94db79510062b8c0d20c232fc0 2215016 doc optional
apache2-doc_2.2.4-1_all.deb
80e58e7c82597c52daa1d1a2c2fd9eac 6639548 devel extra
apache2-src_2.2.4-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGh++1bxelr8HyTqQRAsm3AJ438WxgZ0As/2vUBYTtryC65mJ3wACgob0t
k4Jm/dsW8yL4XnHSQ/K0Sik=
=qKJN
-----END PGP SIGNATURE-----
--- End Message ---