EasyApache 3.28.3 Released
Hello, everyone!
The EasyApache team has published EasyApache 3.28.3:
2-2-2015
Implemented case 158957: Update Apache to version 2.4.12, drop 2.4.10 (with fixes for CVE-2014-3583, CVE-2014-3581, CVE-2014-8109, and CVE-2013-5704)
EASYAPACHE CHANGE LOG:
NOTE: The documentation may take a few hours to sync up between the documentation servers.
Thanks!
-
Something is amiss. I ran EA to update from Apache 2.4.10 + PHP 5.4.37 to Apache 2.4.12 + PHP 5.4.37 on multiple servers. On each of those servers I'm now seeing wonderful stuff like this: [Mon Feb 02 23:12:37.485519 2015] [core:notice] [pid 876919] AH00052: child pid 883186 exit signal Segmentation fault (11) [Mon Feb 02 23:25:05.306719 2015] [core:notice] [pid 876919] AH00052: child pid 885130 exit signal Segmentation fault (11) [Mon Feb 02 23:43:32.913853 2015] [core:notice] [pid 886916] AH00052: child pid 886924 exit signal Segmentation fault (11) [Mon Feb 02 23:53:57.636844 2015] [core:notice] [pid 886916] AH00052: child pid 891094 exit signal Segmentation fault (11) [Tue Feb 03 00:03:12.255606 2015] [core:notice] [pid 886916] AH00052: child pid 891988 exit signal Segmentation fault (11) [Tue Feb 03 00:03:53.296645 2015] [core:notice] [pid 886916] AH00052: child pid 891330 exit signal Segmentation fault (11) [Tue Feb 03 00:05:11.375607 2015] [core:notice] [pid 886916] AH00052: child pid 891987 exit signal Segmentation fault (11) [Tue Feb 03 00:06:47.484631 2015] [core:notice] [pid 886916] AH00052: child pid 891093 exit signal Segmentation fault (11) [Tue Feb 03 00:12:27.889775 2015] [core:notice] [pid 886916] AH00052: child pid 894686 exit signal Segmentation fault (11) [Tue Feb 03 00:12:45.907779 2015] [core:notice] [pid 886916] AH00052: child pid 891957 exit signal Segmentation fault (11) [Tue Feb 03 00:18:37.313850 2015] [core:notice] [pid 886916] AH00052: child pid 894712 exit signal Segmentation fault (11)
I might open a ticket. I'm not the only one who is seeing this with Apache 2.4.12 and PHP 5.4.37, as I have a very good friend who runs a similar configuration and is seeing the same segfaults on a couple of his cPanel servers after running EasyApache. M0 -
I'm seeing some segmentation faults as well after going from Apache 2.4.10 + PHP 5.3.29 to Apache 2.4.12 + PHP 5.3.29 0 -
Are you running running PHP and suEXEC with suPHP or some other configuration? 0 -
Mine was Apache Event MPM, PHP/suEXEC with FCGID. I've since restored to my non-segmenting 2.4.10 build. 0 -
Hi, From what we've seen on these issues, it appears that Apache is now segfaulting when a SSL request comes in for Apache when it does not have a SSL vhost setup. In Apache 2.4.10, Apache would just error out. Now it's actually erroring out and segfaulting. We haven't seen any problems with serving sites over SSL / Non-SSL, only when a request comes in over SSL and there are no SSL vhosts setup in the configuration. We've escalated this to the Apache developers, and they feel it's related to a change with mod_proxy. We're working with them on this to come to a solution. 0 -
thank you thank you thank you 0 -
I may also have this issue. Jacob, if you need further diagnostic information please let me know. 0 -
Is there already a fix for this problem 0 -
Hello, Apache has released a patch in their trunk for this, but it's not been released to customers yet. cPanel is looking at adding this patch in ourselves, but then we have to deal with deep testing to ensure we didn't break anything else with Apache. We should have more information coming out about this shortly. 0 -
Thanks for the information 0 -
EasyApache 3.28.8 changelog shows that [some] part of Apache 2.4.12 was patched. Based upon the lack of segfaults in my Apache logs after building EA 3.28.8, I'd have to guess that the patch to Apache 2.4.12 was meant to resolve the segmentation faults -- and it has done so nicely. m 0 -
Hi Mike! That was exactly the fix :) We're monitoring upstream Apache, so when they fix this patch, we'll revert ours out. Technically, our patch was the patch that was submitted to their trunk, however we just pushed it out first :) 0 -
Thanks cPanel the AH00052 fault is gone in my log files. After my last update with easyapache v3.28.8 0 -
Hi Mike! That was exactly the fix :) We're monitoring upstream Apache, so when they fix this patch, we'll revert ours out. Technically, our patch was the patch that was submitted to their trunk, however we just pushed it out first :)
Thanks, Jacob! I appreciate that your crew did that. Who knows when it would end up in an Apache release :) Mike0 -
What should we be looking for if we just rebuilt with EA 3.30.X and apache 2.4.12 is installed, but were still getting the AH00052 core:notice? My global error_log is like 99% this notice. 0 -
Hi, I'd recommend opening a ticket for further assistance on that. 0
Please sign in to leave a comment.
Comments
17 comments