Package: release.debian.org Severity: normal User: release.debian....@packages.debian.org Usertags: pu
Please review apr/1.2.12-5+lenny2 for inclusion in lenny: apr (1.2.12-5+lenny2) stable; urgency=low . * Set FD_CLOEXEC flag on file descriptors. Not doing so caused Apache httpd modules which do not use the apr API for executing other processes to leak file descriptors to the called processes. In some setups, this could cause security issues and/or problems with Apache failing to restart. This issue affected mod_php (but not mod_cgi). Closes: #366124 The full debdiff is at: http://people.debian.org/~sf/apr_1.2.12-5+lenny2.debdiff Thanks in advance. Cheers, Stefan -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org