List of Debian patches, part 1

[Stefan Fritsch <sf...@sfritsch.de>]

Hi,

the list of Debian patches will come in two parts. Here are those that 
were added since I took over the package about one year ago. It will 
take me a bit longer to go through the older patches.


045_suexec_log_cloexec.dpatch
allow suexec to log after a cgi error, patch from
https://issues.apache.org/bugzilla/show_bug.cgi?id=10744#c6


047_fix_usage_message.dpatch
Add -X to the httpd help message
http://svn.debian.org/wsvn/pkg-apache/trunk/apache2/patches/047_fix_usage_message.dpatch?op=file&rev=0&sc=0


050_enhance_apache2ctl.dpatch
Mostly Debian-specific (create run/lock dirs with correct user, allow 
to override some settings with env variables). Also actually do a 
config test before a restart/reload as documented (PR 45103).


052_logresolve_linelength.dpatch
remove limit of 1024 bytes per line for logresolve, which broke some
log file analysis tools. I was too lazy to do this in a portable way, 
the patch uses glibc's getline(). Therefore not submitted to Apache's 
bugzilla (though I should at least file a bug).
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=331631


053_bad_file_descriptor_PR42829.dpatch
https://issues.apache.org/bugzilla/show_bug.cgi?id=42829#c14 , see 
recent discussion


054_filename_in_warning.dpatch
Make a warning more useful, PR 39992 already in trunk:
http://svn.apache.org/viewvc?view=rev&revision=420307
Trivial, this could still go into 2.2.9


055_htpasswd_salt_generation.dpatch
PR 31440 already in trunk:
http://svn.apache.org/viewvc?view=rev&revision=629159
http://svn.apache.org/viewvc?view=rev&revision=629164


056_mod_cache_IfRange.dpatch
Handle If-Range correctly if the cached resource was stale. PR 44579, 
already committed for 2.2.9


057_disablemods.dpatch
Adds a "--enable-modules=none" build option. Found in the Fedora 
package.  This saves build time when building multiple MPMs.
http://svn.debian.org/wsvn/pkg-apache/trunk/apache2/patches/057_disablemods.dpatch?op=file&rev=0&sc=0


058_suexec-CVE-2007-1742.dpatch
Suexec does not correctly check that scripts are inside the docroot,
patch from https://issues.apache.org/bugzilla/show_bug.cgi?id=44752#c1
(This is not in the current package, but will be in the next upload)


059_ssl_memleak_fix_PR44975.dpatch
mod_ssl memleak PR 44975, already committed for 2.2.9


200_cp_suexec.dpatch
201_build_suexec-custom.dpatch
202_suexec-custom.dpatch
Build an additional suexec helper that can be used with different 
document root and userdir settings (by reading a config file on every 
request). This makes sense because newer versions of the Linux file 
hierarchy standard (FHS) define /srv for things like web pages, but 
does not define the layout under /srv. On the other hand, our default 
document root is still /var/www. This custom suexec will be shipped 
in a separate package and clearly marked as non-standard. It is 
obviously of no use to people who compile apache themselves, 
therefore not submitted to bugzilla. (This is not in the current 
package, but will be in the next upload)


Comments welcome. The fix for PR 39992 could still be included in 
2.2.9, IMHO.


Cheers,
Stefan

Re: List of Debian patches, part 1

[Ruediger Pluem <rp...@apache.org>]

On 05/30/2008 08:17 PM, Stefan Fritsch wrote:

> 
> 
> 054_filename_in_warning.dpatch
> Make a warning more useful, PR 39992 already in trunk:
> http://svn.apache.org/viewvc?view=rev&revision=420307
> Trivial, this could still go into 2.2.9

Proposed for backport to 2.2.x as r661883

> 
> 
> 055_htpasswd_salt_generation.dpatch
> PR 31440 already in trunk:
> http://svn.apache.org/viewvc?view=rev&revision=629159
> http://svn.apache.org/viewvc?view=rev&revision=629164

Proposed for backport to 2.2.x as r661890.

Regards

Rüdiger