Package: mailman
Version: 1:2.1.18-2
Severity: important
The current copy of /etc/mailman/apache.conf in the mailmain package
has configuration items that are for Apache 2.2. For example:
<Directory /usr/lib/cgi-bin/mailman/>
AllowOverride None
Options ExecCGI
AddHandler cgi-script .cgi
Order allow,deny
Allow from all
</Directory>
However, Debian now uses the Apache 2.4 and the above does not really work.
Specifically, the two lines:
Order allow,deny
Allow from all
should probably be:
Require all granted
Per:
http://httpd.apache.org/docs/2.4/upgrading.html#access
At the very least a "apache24.conf" file should be present so that people
are aware of the change. The "apache.conf" file can perhaps be left for
upgrade purposes perhaps.
-- System Information:
Debian Release: 8.2
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages mailman depends on:
ii apache2 [httpd] 2.4.10-10+deb8u3
ii cron 3.0pl1-127+deb8u1
ii debconf [debconf-2.0] 1.5.56
ii libc6 2.19-18+deb8u1
ii logrotate 3.8.7-1+b1
ii lsb-base 4.1+Debian13+nmu1
ii python-dnspython 1.12.0-1
pn python:any <none>
ii ucf 3.0030
Versions of packages mailman recommends:
ii postfix [mail-transport-agent] 2.11.3-1
-- debconf information excluded
