Bug#584165: [SRM] pu: package apr/1.2.12-5+lenny2
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: pu
Please review apr/1.2.12-5+lenny2 for inclusion in lenny:
apr (1.2.12-5+lenny2) stable; urgency=low
.
* Set FD_CLOEXEC flag on file descriptors. Not doing so caused Apache httpd
modules which do not use the apr API for executing other processes to leak
file descriptors to the called processes. In some setups, this could cause
security issues and/or problems with Apache failing to restart. This issue
affected mod_php (but not mod_cgi). Closes: #366124
The full debdiff is at:
http://people.debian.org/~sf/apr_1.2.12-5+lenny2.debdiff
Thanks in advance.
Cheers,
Stefan
Reply to: