apache2_2.4.38-1_sourceonly.changes ACCEPTED into unstable

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 29 Jan 2019 23:49:49 +0100 Source: apache2 Binary: apache2 apache2-bin apache2-bin-dbgsym apache2-data apache2-dev apache2-doc apache2-ssl-dev apache2-suexec-custom apache2-suexec-custom-dbgsym

Bug#920303: marked as done (apache2: CVE-2018-17199: mod_session_cookie does not respect expiry time)

Your message dated Tue, 29 Jan 2019 23:19:31 + with message-id and subject line Bug#920303: fixed in apache2 2.4.38-1 has caused the Debian Bug report #920303, regarding apache2: CVE-2018-17199: mod_session_cookie does not respect expiry time to be marked as done. This means that you claim

Bug#920220: marked as done (apache2: CVE-2019-0190: mod_ssl 2.4.37 remote DoS when used with OpenSSL 1.1.1)

Your message dated Tue, 29 Jan 2019 23:19:31 + with message-id and subject line Bug#920220: fixed in apache2 2.4.38-1 has caused the Debian Bug report #920220, regarding apache2: CVE-2019-0190: mod_ssl 2.4.37 remote DoS when used with OpenSSL 1.1.1 to be marked as done. This means that you

Processing of apache2_2.4.38-1_sourceonly.changes

apache2_2.4.38-1_sourceonly.changes uploaded successfully to localhost along with the files: apache2_2.4.38-1.dsc apache2_2.4.38.orig.tar.gz apache2_2.4.38.orig.tar.gz.asc apache2_2.4.38-1.debian.tar.xz Greetings, Your Debian queue daemon (running on host usper.debian.org)

Bug#920302: marked as done (apache2: CVE-2018-17189: mod_http2, DoS via slow, unneeded request bodies)

Your message dated Tue, 29 Jan 2019 23:19:31 + with message-id and subject line Bug#920302: fixed in apache2 2.4.38-1 has caused the Debian Bug report #920302, regarding apache2: CVE-2018-17189: mod_http2, DoS via slow, unneeded request bodies to be marked as done. This means that you claim

Bug#880993: marked as done (enable http2 protocol when http2 module is enabled)

Your message dated Tue, 29 Jan 2019 23:19:31 + with message-id and subject line Bug#880993: fixed in apache2 2.4.38-1 has caused the Debian Bug report #880993, regarding enable http2 protocol when http2 module is enabled to be marked as done. This means that you claim that the problem has

Bug#909495: (no subject)

Dear Edward, thank you for this detailed bug report. We examined the very same issue with Debian 9 and I was digging it down to PHP-FPM/Apache2. Unfortunately it is not PHP but Apache2 which behaves unexpected. I just want to bump this issue and hope for a bugfix release of apache 2.4.25.