Package: mediawiki
Version: 1:1.19.19+dfsg-0+deb7u1
Severity: important
Dear Maintainer,
The Apache config file included in the mediawiki package
(/etc/mediawiki/apache.conf) does not work with Apache 2.4 due to
changes in Apache auth syntax. The "Allow from all" syntax is now
"Require all granted". As mod_version is installed and activated by
default in Debian, a generic solution would be to add version detection
to the config file. For example:
<IfModule mod_version.c>
<IfVersion < 2.4>
Order allow,deny
Allow from all
</IfVersion>
<IfVersion >= 2.4>
Require all granted
</IfVersion>
</IfModule>
For your convenience, I have attached a diff.
--- /etc/mediawiki/apache.conf.ori 2014-09-29 17:55:10.750014910 +0200
+++ /etc/mediawiki/apache.conf 2014-09-29 18:05:26.462372885 +0200
@@ -5,8 +5,15 @@
<Directory /var/lib/mediawiki/>
Options +FollowSymLinks
AllowOverride All
- order allow,deny
- allow from all
+ <IfModule mod_version.c>
+ <IfVersion < 2.4>
+ Order allow,deny
+ Allow from all
+ </IfVersion>
+ <IfVersion >= 2.4>
+ Require all granted
+ </IfVersion>
+ </IfModule>
</Directory>
# some directories must be protected
