| 2012-04-26 12:08:15 |
Christoph_vW |
bug |
|
|
added bug |
| 2012-04-26 12:16:24 |
Christoph_vW |
bug watch added |
|
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=670247 |
|
| 2012-04-27 07:08:37 |
Christoph_vW |
tags |
|
precise |
|
| 2012-04-27 07:39:15 |
Robie Basak |
bug watch added |
|
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=670248 |
|
| 2012-04-27 07:39:15 |
Robie Basak |
bug task added |
|
apache2 (Debian) |
|
| 2012-04-27 07:39:39 |
Robie Basak |
bug task deleted |
apache2 (Debian) |
|
|
| 2012-04-27 07:39:53 |
Robie Basak |
bug task added |
|
apache2 (Debian) |
|
| 2012-04-27 07:40:22 |
Robie Basak |
bug |
|
|
added subscriber Robie Basak |
| 2012-04-27 08:56:13 |
James Page |
affects |
apache2 (Ubuntu) |
modsecurity-apache (Ubuntu) |
|
| 2012-04-27 08:56:13 |
James Page |
modsecurity-apache (Ubuntu): importance |
Undecided |
High |
|
| 2012-04-27 08:56:13 |
James Page |
modsecurity-apache (Ubuntu): status |
New |
Confirmed |
|
| 2012-04-27 08:59:05 |
James Page |
modsecurity-apache (Ubuntu): status |
Confirmed |
Triaged |
|
| 2012-04-27 17:00:03 |
Bug Watch Updater |
apache2 (Debian): status |
Unknown |
New |
|
| 2012-04-29 12:18:19 |
Aron Xu |
bug |
|
|
added subscriber Aron Xu |
| 2012-04-29 12:18:38 |
Aron Xu |
tags |
precise |
libxml2-ma precise |
|
| 2012-05-04 09:57:40 |
Bug Watch Updater |
apache2 (Debian): status |
New |
Fix Released |
|
| 2012-05-23 05:04:16 |
Robie Basak |
branch linked |
|
lp:~racb/ubuntu/quantal/apache2/988819 |
|
| 2012-05-23 05:09:38 |
Robie Basak |
modsecurity-apache (Ubuntu): status |
Triaged |
Fix Released |
|
| 2012-05-23 05:09:59 |
Robie Basak |
bug task added |
|
apache2 (Ubuntu) |
|
| 2012-05-23 05:10:09 |
Robie Basak |
apache2 (Ubuntu): status |
New |
Triaged |
|
| 2012-05-23 05:10:12 |
Robie Basak |
apache2 (Ubuntu): importance |
Undecided |
High |
|
| 2012-05-23 05:11:36 |
Robie Basak |
nominated for series |
|
Ubuntu Precise |
|
| 2012-05-23 05:14:29 |
Robie Basak |
bug |
|
|
added subscriber Ubuntu Sponsors Team |
| 2012-05-23 15:41:50 |
Jamie Strandboge |
bug task added |
|
apache2 (Ubuntu Precise) |
|
| 2012-05-23 15:41:50 |
Jamie Strandboge |
bug task added |
|
modsecurity-apache (Ubuntu Precise) |
|
| 2012-05-23 15:47:54 |
Robie Basak |
apache2 (Ubuntu Precise): importance |
Undecided |
High |
|
| 2012-05-23 15:47:57 |
Robie Basak |
modsecurity-apache (Ubuntu Precise): importance |
Undecided |
High |
|
| 2012-05-23 15:48:32 |
Robie Basak |
apache2 (Ubuntu Precise): status |
New |
Triaged |
|
| 2012-05-23 15:48:35 |
Robie Basak |
modsecurity-apache (Ubuntu Precise): status |
New |
Triaged |
|
| 2012-06-01 09:54:39 |
James Page |
modsecurity-apache (Ubuntu Precise): milestone |
|
ubuntu-12.04.1 |
|
| 2012-06-01 09:54:44 |
James Page |
apache2 (Ubuntu Precise): milestone |
|
ubuntu-12.04.1 |
|
| 2012-06-07 17:54:27 |
Sebastien Bacher |
removed subscriber Ubuntu Sponsors Team |
|
|
|
| 2012-06-08 11:09:58 |
Robie Basak |
attachment added |
|
new-debian-ubuntu.debdiff https://bugs.launchpad.net/debian/+source/apache2/+bug/988819/+attachment/3180616/+files/new-debian-ubuntu.debdiff |
|
| 2012-06-08 11:10:25 |
Robie Basak |
attachment added |
|
ubuntu-ubuntu.debdiff https://bugs.launchpad.net/debian/+source/apache2/+bug/988819/+attachment/3180617/+files/ubuntu-ubuntu.debdiff |
|
| 2012-06-08 11:10:52 |
Robie Basak |
attachment added |
|
old-debian-ubuntu.debdiff https://bugs.launchpad.net/debian/+source/apache2/+bug/988819/+attachment/3180618/+files/old-debian-ubuntu.debdiff |
|
| 2012-06-08 11:45:11 |
James Page |
apache2 (Ubuntu): status |
Triaged |
Fix Released |
|
| 2012-06-08 11:57:00 |
James Page |
apache2 (Ubuntu Precise): assignee |
|
Robie Basak (racb) |
|
| 2012-06-08 11:57:12 |
James Page |
modsecurity-apache (Ubuntu Precise): assignee |
|
Robie Basak (racb) |
|
| 2012-06-08 13:59:51 |
Robie Basak |
description |
service apache2 restart
apache2: Syntax error on line 210 of /etc/apache2/apache2.conf: Syntax error on line 1 of /etc/apache2/mods-enabled/mod-security.load: Cannot load /usr/lib/libxml2.so.2 into server: /usr/lib/libxml2.so.2: cannot open shared object file: No such file or directory
Action 'configtest' failed.
The Apache error log may have more information.
...fail!
in file /etc/apache2/mods-enabled/mod-security.load:
LoadFile /usr/lib/libxml2.so.2
correct path on x86 would be /usr/lib/i386-linux-gnu/libxml2.so.2
maybe a symlink could fix this issue? |
[Impact]
The libapache2-modsecurity package does not work out of the box (but a workaround is available).
[Test Case]
apt-get -y install apache2 libapache2-modsecurity
This fails with the following error, although the postinst does exit 0:
Setting up libapache2-modsecurity (2.6.3-1) ...
Action 'configtest' failed.
The Apache error log may have more information.
Your apache2 configuration is broken, so we're not restarting it for you.
$ sudo apachectl configtest
apache2: Syntax error on line 210 of /etc/apache2/apache2.conf: Syntax error on line 1 of /etc/apache2/mods-enabled/mod-security.load: Cannot load /usr/lib/libxml2.so.2 into server: /usr/lib/libxml2.so.2: cannot open shared object file: No such file or directory
Action 'configtest' failed.
The Apache error log may have more information.
[Fix]
Debian has fixed this by updating apache2 to use dlopen's search path and changing mod-security.load to not use any absolute path. We have merged apache2 and synced modsecurity-apache and verified that Quantal is fixed.
For Precise, we have backported the upstream apache2 dlopen search path modification, and fixed the path in mod-security.load the same as Debian.
[Regression Potential]
The modsecurity-apache fix is just the load path, so it should either work or fail. I can't see any potential for regression here.
The apache2 fix involves changing the behaviour of dynamic module loads. There is now a fallback to use the dlopen search path if the name does not use an absolute path. If there is a regression, it will probably be with edge cases to do with module load paths and likely manifest themselves as modules failing to load. "sudo apachectl configtest" should reveal these.
Original bug description:
service apache2 restart
apache2: Syntax error on line 210 of /etc/apache2/apache2.conf: Syntax error on line 1 of /etc/apache2/mods-enabled/mod-security.load: Cannot load /usr/lib/libxml2.so.2 into server: /usr/lib/libxml2.so.2: cannot open shared object file: No such file or directory
Action 'configtest' failed.
The Apache error log may have more information.
...fail!
in file /etc/apache2/mods-enabled/mod-security.load:
LoadFile /usr/lib/libxml2.so.2
correct path on x86 would be /usr/lib/i386-linux-gnu/libxml2.so.2
maybe a symlink could fix this issue? |
|
| 2012-06-08 14:20:29 |
Robie Basak |
attachment added |
|
apache2.sru.debdiff https://bugs.launchpad.net/debian/+source/apache2/+bug/988819/+attachment/3180781/+files/apache2.sru.debdiff |
|
| 2012-06-08 14:20:49 |
Robie Basak |
attachment added |
|
modsecurity-apache.sru.debdiff https://bugs.launchpad.net/debian/+source/apache2/+bug/988819/+attachment/3180782/+files/modsecurity-apache.sru.debdiff |
|
| 2012-06-08 14:58:47 |
Robie Basak |
branch linked |
|
lp:~racb/ubuntu/precise/modsecurity-apache/988819 |
|
| 2012-06-08 14:59:04 |
Robie Basak |
branch linked |
|
lp:~racb/ubuntu/precise/apache2/988819 |
|
| 2012-06-08 15:17:14 |
James Page |
summary |
wrong path to libxml2.so.2 in mod_security |
[SRU] wrong path to libxml2.so.2 in mod_security - broken by multiarch enabled libraries |
|
| 2012-06-08 16:19:41 |
James Page |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2012-06-09 07:02:43 |
James Page |
apache2 (Ubuntu Precise): status |
Triaged |
In Progress |
|
| 2012-06-09 07:02:47 |
James Page |
modsecurity-apache (Ubuntu Precise): status |
Triaged |
In Progress |
|
| 2012-06-13 22:52:52 |
Clint Byrum |
apache2 (Ubuntu Precise): status |
In Progress |
Fix Committed |
|
| 2012-06-13 22:52:59 |
Clint Byrum |
bug |
|
|
added subscriber SRU Verification |
| 2012-06-13 22:53:02 |
Clint Byrum |
tags |
libxml2-ma precise |
libxml2-ma precise verification-needed |
|
| 2012-06-13 22:53:11 |
Clint Byrum |
modsecurity-apache (Ubuntu Precise): status |
In Progress |
Fix Committed |
|
| 2012-06-14 00:01:35 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/precise-proposed/modsecurity-apache |
|
| 2012-06-14 00:05:21 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/precise-proposed/apache2 |
|
| 2012-06-27 20:16:52 |
Julian Taylor |
bug task added |
|
mod-proxy-html (Ubuntu) |
|
| 2012-06-27 20:17:12 |
Launchpad Janitor |
mod-proxy-html (Ubuntu): status |
New |
Confirmed |
|
| 2012-06-27 20:17:12 |
Launchpad Janitor |
mod-proxy-html (Ubuntu Precise): status |
New |
Confirmed |
|
| 2012-06-27 20:17:25 |
Julian Taylor |
mod-proxy-html (Ubuntu): status |
Confirmed |
Fix Released |
|
| 2012-06-27 20:19:50 |
Julian Taylor |
bug |
|
|
added subscriber Julian Taylor |
| 2012-07-09 16:11:28 |
Aditya V |
bug |
|
|
added subscriber kroq-gar78 |
| 2012-07-17 16:31:21 |
Clint Byrum |
tags |
libxml2-ma precise verification-needed |
libxml2-ma precise verification-failed |
|
| 2012-07-19 11:15:28 |
Robie Basak |
apache2 (Ubuntu Precise): status |
Fix Committed |
In Progress |
|
| 2012-07-19 11:15:31 |
Robie Basak |
modsecurity-apache (Ubuntu Precise): status |
Fix Committed |
In Progress |
|
| 2012-07-19 11:16:14 |
James Page |
mod-proxy-html (Ubuntu Precise): milestone |
|
ubuntu-12.04.1 |
|
| 2012-07-19 11:16:34 |
James Page |
mod-proxy-html (Ubuntu Precise): assignee |
|
Robie Basak (racb) |
|
| 2012-07-19 11:16:55 |
James Page |
mod-proxy-html (Ubuntu Precise): importance |
Undecided |
High |
|
| 2012-07-19 11:17:42 |
James Page |
apache2 (Ubuntu Precise): status |
In Progress |
Invalid |
|
| 2012-07-19 11:18:34 |
Robie Basak |
mod-proxy-html (Ubuntu Precise): status |
Confirmed |
In Progress |
|
| 2012-07-19 11:18:39 |
Robie Basak |
apache2 (Ubuntu Precise): assignee |
Robie Basak (racb) |
|
|
| 2012-07-19 12:48:36 |
Robie Basak |
description |
[Impact]
The libapache2-modsecurity package does not work out of the box (but a workaround is available).
[Test Case]
apt-get -y install apache2 libapache2-modsecurity
This fails with the following error, although the postinst does exit 0:
Setting up libapache2-modsecurity (2.6.3-1) ...
Action 'configtest' failed.
The Apache error log may have more information.
Your apache2 configuration is broken, so we're not restarting it for you.
$ sudo apachectl configtest
apache2: Syntax error on line 210 of /etc/apache2/apache2.conf: Syntax error on line 1 of /etc/apache2/mods-enabled/mod-security.load: Cannot load /usr/lib/libxml2.so.2 into server: /usr/lib/libxml2.so.2: cannot open shared object file: No such file or directory
Action 'configtest' failed.
The Apache error log may have more information.
[Fix]
Debian has fixed this by updating apache2 to use dlopen's search path and changing mod-security.load to not use any absolute path. We have merged apache2 and synced modsecurity-apache and verified that Quantal is fixed.
For Precise, we have backported the upstream apache2 dlopen search path modification, and fixed the path in mod-security.load the same as Debian.
[Regression Potential]
The modsecurity-apache fix is just the load path, so it should either work or fail. I can't see any potential for regression here.
The apache2 fix involves changing the behaviour of dynamic module loads. There is now a fallback to use the dlopen search path if the name does not use an absolute path. If there is a regression, it will probably be with edge cases to do with module load paths and likely manifest themselves as modules failing to load. "sudo apachectl configtest" should reveal these.
Original bug description:
service apache2 restart
apache2: Syntax error on line 210 of /etc/apache2/apache2.conf: Syntax error on line 1 of /etc/apache2/mods-enabled/mod-security.load: Cannot load /usr/lib/libxml2.so.2 into server: /usr/lib/libxml2.so.2: cannot open shared object file: No such file or directory
Action 'configtest' failed.
The Apache error log may have more information.
...fail!
in file /etc/apache2/mods-enabled/mod-security.load:
LoadFile /usr/lib/libxml2.so.2
correct path on x86 would be /usr/lib/i386-linux-gnu/libxml2.so.2
maybe a symlink could fix this issue? |
[Impact]
The libapache2-modsecurity and libapache2-mod-proxy-html packages does not work out of the box (but workarounds are available).
[Test Case]
apt-get -y install apache2 <libapache2-modsecurity or libapache2-mod-proxy-html>
This fails with the following error, although the postinst does exit 0:
Setting up libapache2-modsecurity (2.6.3-1) ...
Action 'configtest' failed.
The Apache error log may have more information.
Your apache2 configuration is broken, so we're not restarting it for you.
$ sudo apachectl configtest
apache2: Syntax error on line 210 of /etc/apache2/apache2.conf: Syntax error on line 1 of /etc/apache2/mods-enabled/mod-security.load: Cannot load /usr/lib/libxml2.so.2 into server: /usr/lib/libxml2.so.2: cannot open shared object file: No such file or directory
Action 'configtest' failed.
The Apache error log may have more information.
Expected results:
1. The installations should succeed.
2. "sudo apachectl configtest" should return "Syntax OK" with a zero exit status.
3. "sudo grep libxml2.so.2 /proc/$(cat /run/apache2.pid)/maps" should display load locations of libxml2.so.2.<version>, in order to verify that the runtime linker has successfully linked the required module.
[Fix]
Debian has fixed this by updating apache2 to use dlopen's search path and changing mod-security.load to not use any absolute path. We have merged apache2. modsecurity-apache and mod-proxy-html have synced and I have verified that Quantal is fixed.
For the Precise SRU, it was concluded that the change to apache2 in Debian is too invasive. Instead, we have removed the LoadFile directives entirely, after ensuring that the modules do depend correctly on libxml2.so.2.
[Regression Potential]
With the new approach, apache2 does not need an update.
Previously, libapache2-modsecurity and libapache2-mod-proxy-html did not load at all in the default configuration, so I don't see how there could be a regression here.
We have changed a config file, but since it is a config file, an administrator who has manually worked around the problem by changing the config file differently will be prompted and so should not get an unexpected regression.
/usr/lib/apache2/modules/mod_proxy_html.so now explicitly imports symbols from libxml2.so.2, but this was done by the LoadFile directive anyway, so I don't see that there would be a problem here.
So the area to look for regressions is in the existence of XML functionality in these two modules, but I think this change is so minimal it is very unlikely.
Original bug description:
service apache2 restart
apache2: Syntax error on line 210 of /etc/apache2/apache2.conf: Syntax error on line 1 of /etc/apache2/mods-enabled/mod-security.load: Cannot load /usr/lib/libxml2.so.2 into server: /usr/lib/libxml2.so.2: cannot open shared object file: No such file or directory
Action 'configtest' failed.
The Apache error log may have more information.
...fail!
in file /etc/apache2/mods-enabled/mod-security.load:
LoadFile /usr/lib/libxml2.so.2
correct path on x86 would be /usr/lib/i386-linux-gnu/libxml2.so.2
maybe a symlink could fix this issue? |
|
| 2012-07-19 12:49:54 |
Robie Basak |
branch linked |
|
lp:~racb/ubuntu/precise/mod-proxy-html/988819 |
|
| 2012-07-19 12:50:19 |
Robie Basak |
branch linked |
|
lp:~racb/ubuntu/precise/modsecurity-apache/988819_2 |
|
| 2012-07-21 09:05:21 |
Adam Conrad |
modsecurity-apache (Ubuntu Precise): status |
In Progress |
Fix Committed |
|
| 2012-07-21 09:05:27 |
Adam Conrad |
tags |
libxml2-ma precise verification-failed |
libxml2-ma precise |
|
| 2012-07-21 09:05:29 |
Adam Conrad |
tags |
libxml2-ma precise |
libxml2-ma precise verification-needed |
|
| 2012-07-21 09:06:32 |
Adam Conrad |
mod-proxy-html (Ubuntu Precise): status |
In Progress |
Fix Committed |
|
| 2012-07-21 09:43:57 |
Launchpad Janitor |
branch linked |
|
lp:~ubuntu-branches/ubuntu/precise/mod-proxy-html/precise-proposed |
|
| 2012-07-27 19:22:21 |
Stéphane Graber |
tags |
libxml2-ma precise verification-needed |
libxml2-ma precise verification-done |
|
| 2012-07-30 00:22:19 |
Scott Kitterman |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2012-07-30 00:25:13 |
Launchpad Janitor |
modsecurity-apache (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
| 2012-07-30 00:25:18 |
Launchpad Janitor |
mod-proxy-html (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
