Merge ~bryce/ubuntu/+source/apache2:sru-lp1927742-focal into ubuntu/+source/apache2:ubuntu/focal-devel

Proposed by Bryce Harrington
Status: Merged
Approved by: git-ubuntu bot
Approved revision: not available
Merge reported by: Bryce Harrington
Merged at revision: 9d915708820cd0449254e901f522c09e84b6984c
Proposed branch: ~bryce/ubuntu/+source/apache2:sru-lp1927742-focal
Merge into: ubuntu/+source/apache2:ubuntu/focal-devel
Diff against target: 61 lines (+28/-0)
4 files modified
debian/changelog (+9/-0)
debian/config-dir/mods-available/setenvif.conf (+2/-0)
debian/patches/fix-dolphin-to-delete-webdav-dirs.patch (+16/-0)
debian/patches/series (+1/-0)
Reviewer Review Type Date Requested Status
git-ubuntu bot Approve
Andreas Hasenack Approve
Canonical Server Reporter Pending
Canonical Server packageset reviewers Pending
Canonical Server Core Reviewers Pending
Review via email: mp+458987@code.launchpad.net

Description of the change

Adds a fix for a KDE issue with apache2's webdav. This carries the work by Michal, which while his approach was accurate I found through testing was missing the actual fix being installed. I've corrected that and verified the testing using both curl and dolphin as clients against each of the 4 series being targeted as webdav servers.

Bug: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/1927742
PPA: https://launchpad.net/~bryce/+archive/ubuntu/apache2-sru-lp1927742/

I've just kicked off a fresh set of DEP8 runs against the PPA, but as the DEP8 tests don't cover this case I don't expect them to be of much interest.

To post a comment you must log in.
Revision history for this message
Bryce Harrington (bryce) wrote :

  - apache2/2.4.41-4ubuntu3.16~focal1
    + ✅ apache2 on focal for amd64 @ 29.01.24 20:46:58 Log️ 🗒️
    + ✅ apache2 on focal for arm64 @ 29.01.24 21:44:02 Log️ 🗒️
    + ✅ apache2 on focal for armhf @ 29.01.24 21:16:09 Log️ 🗒️
    + ✅ apache2 on focal for ppc64el @ 29.01.24 20:57:14 Log️ 🗒️
    + ✅ apache2 on focal for s390x @ 29.01.24 20:57:17 Log️ 🗒️

Revision history for this message
Andreas Hasenack (ahasenack) wrote :

Is this missing the debian/config-dir/mods-available/setenvif.conf change?

review: Needs Information
Revision history for this message
Bryce Harrington (bryce) wrote :

Fixed now. Branch push mishap.

Revision history for this message
Andreas Hasenack (ahasenack) :
Revision history for this message
Andreas Hasenack (ahasenack) :
Revision history for this message
Andreas Hasenack (ahasenack) wrote :

+1

review: Approve
Revision history for this message
git-ubuntu bot (git-ubuntu-bot) wrote :

Approvers: bryce, ahasenack
Uploaders: bryce, ahasenack
MP auto-approved

review: Approve

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
1diff --git a/debian/changelog b/debian/changelog
2index ac23128..9771f55 100644
3--- a/debian/changelog
4+++ b/debian/changelog
5@@ -1,3 +1,12 @@
6+apache2 (2.4.41-4ubuntu3.16) focal; urgency=medium
7+
8+ * d/c/m/setenvif.conf, d/p/fix-dolphin-to-delete-webdav-dirs.patch: Add
9+ dolphin and Konqueror/5 careful redirection so that directories can be
10+ deleted via webdav.
11+ (LP: #1927742)
12+
13+ -- Bryce Harrington <bryce@canonical.com> Tue, 16 Jan 2024 19:00:27 -0800
14+
15 apache2 (2.4.41-4ubuntu3.15) focal-security; urgency=medium
16
17 * SECURITY UPDATE: mod_macro buffer over-read
18diff --git a/debian/config-dir/mods-available/setenvif.conf b/debian/config-dir/mods-available/setenvif.conf
19index b6c4cc4..e03913c 100644
20--- a/debian/config-dir/mods-available/setenvif.conf
21+++ b/debian/config-dir/mods-available/setenvif.conf
22@@ -26,6 +26,8 @@
23 BrowserMatch "^XML Spy" redirect-carefully
24 BrowserMatch "^Dreamweaver-WebDAV-SCM1" redirect-carefully
25 BrowserMatch " Konqueror/4" redirect-carefully
26+ BrowserMatch " Konqueror/5" redirect-carefully
27+ BrowserMatch " dolphin/" redirect-carefully
28
29 </IfModule>
30
31diff --git a/debian/patches/fix-dolphin-to-delete-webdav-dirs.patch b/debian/patches/fix-dolphin-to-delete-webdav-dirs.patch
32new file mode 100644
33index 0000000..1fac833
34--- /dev/null
35+++ b/debian/patches/fix-dolphin-to-delete-webdav-dirs.patch
36@@ -0,0 +1,16 @@
37+Description: Recognize dolphin and Konqueror/5 browsers for webdav.
38+ Without these settings, these browsers will be sent redirects on
39+ URLs for directories specified without a trailing '/'. That can
40+ prevent webdav DELETE operations from working.
41+Author: Michal Maloszewski <michal.maloszewski@canonical.com>
42+Bug: https://bz.apache.org/bugzilla/show_bug.cgi?id=67039
43+Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/1927742
44+Last-Update: 2024-01-16
45+--- a/docs/conf/extra/httpd-dav.conf.in
46++++ b/docs/conf/extra/httpd-dav.conf.in
47+@@ -48,3 +48,5 @@
48+ BrowserMatch "^XML Spy" redirect-carefully
49+ BrowserMatch "^Dreamweaver-WebDAV-SCM1" redirect-carefully
50+ BrowserMatch " Konqueror/4" redirect-carefully
51++BrowserMatch " Konqueror/5" redirect-carefully
52++BrowserMatch " dolphin/" redirect-carefully
53diff --git a/debian/patches/series b/debian/patches/series
54index 5c85d49..578663c 100644
55--- a/debian/patches/series
56+++ b/debian/patches/series
57@@ -1,3 +1,4 @@
58+fix-dolphin-to-delete-webdav-dirs.patch
59 fhs_compliance.patch
60 no_LD_LIBRARY_PATH.patch
61 suexec-CVE-2007-1742.patch

Subscribers

People subscribed via source and target branches