Bug#1112017: apache2: DLA-4270-1 regressions

Bastien Roucaries <[email protected]> Mon, 25 Aug 2025 17:11:42 +0200
Newsgroups gmane.linux.debian.devel.apache
Message-ID <9191784.MhkbZ0Pkbq__10183.3812821255$1756134807$gmane$org@debian-ei>
Le lundi 25 août 2025, 10:44:33 heure d’été d’Europe centrale David Prevot a écrit :
> Hi Bastien,
> 
> On 2025-08-25 10:26, Bastien Roucaries wrote:
> > Le lundi 25 août 2025 09:35:17 heure d’été d’Europe centrale, vous avez écrit :
> > Peux tu m'envoyer un minimal from scratch test case ?
> 
> Thankrs for your prompt reply.
> 
> root@test-www01:~# cat /etc/apache2/sites-enabled/examplenet.conf
> <VirtualHost *:80 *:443>
>     ServerName example.net
>     DocumentRoot /home/examplenet/www/
> 
>     <Directory /home/examplenet/www/>
>         Options +SymLinksIfOwnerMatch
>         AllowOverride AuthConfig Limit FileInfo Options=+SymLinksIfOwnerMatch Options=FilterDeclare 
>         Require all granted
>     </Directory>
> </VirtualHost>
> 
> root@test-www01:~# apt upgrade 
> Reading package lists... Done
> Building dependency tree... Done
> Reading state information... Done
> Calculating upgrade... Done
> Use 'apt autoremove' to remove it.
> The following packages will be upgraded:
>   apache2 apache2-bin apache2-data apache2-utils
> 4 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
> Need to get 0 B/2,194 kB of archives.
> After this operation, 49.2 kB of additional disk space will be used.
> Do you want to continue? [Y/n] 
> (Reading database ... 71457 files and directories currently installed.)
> Preparing to unpack .../apache2_2.4.65-1~deb11u1_amd64.deb ...
> Unpacking apache2 (2.4.65-1~deb11u1) over (2.4.62-1~deb11u2) ...
> Preparing to unpack .../apache2-bin_2.4.65-1~deb11u1_amd64.deb ...
> Unpacking apache2-bin (2.4.65-1~deb11u1) over (2.4.62-1~deb11u2) ...
> Preparing to unpack .../apache2-data_2.4.65-1~deb11u1_all.deb ...
> Unpacking apache2-data (2.4.65-1~deb11u1) over (2.4.62-1~deb11u2) ...
> Preparing to unpack .../apache2-utils_2.4.65-1~deb11u1_amd64.deb ...
> Unpacking apache2-utils (2.4.65-1~deb11u1) over (2.4.62-1~deb11u2) ...
> Setting up apache2-bin (2.4.65-1~deb11u1) ...
> Setting up apache2-data (2.4.65-1~deb11u1) ...
> Setting up apache2-utils (2.4.65-1~deb11u1) ...
> Setting up apache2 (2.4.65-1~deb11u1) ...
> Job for apache2.service failed because the control process exited with error code.
> See "systemctl status apache2.service" and "journalctl -xe" for details.
> apache-htcacheclean.service is a disabled or a static unit not running, not starting it.
> Processing triggers for man-db (2.9.4-2) ...
> mount: /usr: mount point is busy.
> root@test-www01:~# apachectl configtest
> AH00526: Syntax error on line 7 of /etc/apache2/sites-enabled/examplenet.conf:
> Illegal option +SymLinksIfOwnerMatch
> Action 'configtest' failed.
> The Apache error log may have more information.
> root@test-www01:~# vi /etc/apache2/sites-enabled/examplenet.conf # Retrait de Options=+SymLinksIfOwnerMatch
> root@test-www01:~# apachectl configtest
> AH00526: Syntax error on line 7 of /etc/apache2/sites-enabled/examplenet.conf:
> Illegal option FilterDeclare
> Action 'configtest' failed.
> The Apache error log may have more information.
Hi David

Could check if reverting this changes fix your problem ?
https://github.com/apache/httpd/pull/310/commits/7c52fae8fb0234089cfb61a1c63d7701c2d2b97a

I can when salsa CI is up do a revert if need using aptly target

Main problem is that it seems your config is silently ignored, could you test on your side ?

rouca
> 
> Cheers,
>
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEXQGHuUCiRbrXsPVqADoaLapBCF8FAmisfRIACgkQADoaLapB
CF8NXA//fuZXtOHANIR4HxTjEU7VP4rNS/EUT9hE4Pp/Q6DYiTlI/nJSWHedkH0N
PJg770sGhpW+tHSUHGmB6M8n3kdlRwtwwiOpD6rKsEwvS1/X+lhCnKJOjQ0LW+x/
kfLRGXkuH41zA2W1MX4uyj5hBbtLjM1gJEbu3NQ44FGQ7paq4vyhtuGEfknlOygk
ooJfNczK4EY/Ei07A9sE3FbocxEYkKQ3D7WOIpRWo+FGQoi5vmOF6B8CazEEQjqx
y8kIG7lBzjKrIIE14svMFpE2wY8p/Q0FwYBhUk7U0j3EZMqIaIZZC4vH73z0Zb2G
3+B0/Gt0+D5w8/NZMh0aQC419GM9DAW4Qq/57seU3NseaktblZYx7U320VqteiUb
Xhz+YHVNv0goi/1PEucn5bUHYiXSMn6QXDqmJhhiyZlzWNjfH++l0zeOSFmWflMd
GiZciF5aISyBtO97A6I4gU96obqj+nGps3UOGN/fGaoEqW4zJtpUZOjdnZLfS7LL
tRnWIWq1JQEnC9aKH1fNpYPNQ5qTuTrdaLJdilk0qiPBpdahTGdbA4BAY42YC0//
6rQx/7YvNoEV2RwGE9JvG4I5epyYZJ7mCse09n4flplU/LP4jNouKAxZBl2LseG0
iZssTyd6tQGDWl9lPFcErYT6rM4qyih2hmCwjTNMJnNejkfjT9g=
=D8Xj
-----END PGP SIGNATURE-----