Bug#1071596: apache2: envvars evaluates string in conditional instead of testing for empty string

2024-05-22 Thread Mark Hedges
; Am 21.05.24 um 22:30 schrieb Mark Hedges: > > Package: apache2 > > Version: 2.4.59-1~deb12u1 > > Severity: normal > > > > Dear Maintainer, > > > > `envvars` evaluates string in conditional instead of testing for empty > > string. > >

Bug#1071596: apache2: envvars evaluates string in conditional instead of testing for empty string

2024-05-21 Thread Mark Hedges
Package: apache2 Version: 2.4.59-1~deb12u1 Severity: normal Dear Maintainer, `envvars` evaluates string in conditional instead of testing for empty string. `apachectl` calls `envvars` which shows a syntax error despite working: root@nodeo:/etc/letsencrypt# apachectl configtest /usr/sbin/apach

Bug#497307: apache2.2-common: /etc/logrotate.d/apache2 should reload, not restart

2008-09-05 Thread Mark Hedges
On Fri, 5 Sep 2008, Stefan Fritsch wrote: > > Am I going to run into these unspecified problems with > > reload? It's just a PHP site with a few perl CGI's and no > > mod_perl handlers. > > Uhh... Possibly. > > Some apache child processes may hang on reload. After many reloads, > you may run int

Bug#497307: apache2.2-common: /etc/logrotate.d/apache2 should reload, not restart

2008-09-05 Thread Mark Hedges
> It has been decided that this won't be changed in etch > (because reload had different problems at the time). > However, the problem and the fix is already documented in > README.Debian. Indeed it is. Which is what I figured out to do. Am I going to run into these unspecified problems with re

Bug#497307: apache2.2-common: /etc/logrotate.d/apache2 should reload, not restart

2008-08-31 Thread Mark Hedges
Package: apache2.2-common Version: 2.2.3-4+etch5 Severity: important etch version of /etc/logrotate.d/apache2 should use reload, not restart. Otherwise a site with an SSL cert that uses a passphrase will not restart. This renders SSL certificates with passphrases useless under default config.

Bug#489899: apache2-utils htpasswd bogus compromised md5 factor

2008-07-08 Thread Mark Hedges
Package: apache2-utils Version: 2.2.3-4+etch4 Severity: normal Version 2.2.3-4+etch4 of apache2-utils contains an `htpasswd` that does this: [EMAIL PROTECTED]:~$ htpasswd -mbn foo bar foo:$apr1$.C9HN...$VJYoF1cM6sqQkjgiltBWA1 [EMAIL PROTECTED]:~$ htpasswd -mbn foo bar foo:$apr1$efQG5/..