]>
git.pld-linux.org Git - packages/apache.git/log
Arkadiusz Miśkiewicz [Fri, 30 Jan 2015 15:46:57 +0000 (16:46 +0100)]
- up to 2.4.12; fixes CVE-2014-3583, CVE-2014-3581, CVE-2014-8109, CVE-2013-5704
Arkadiusz Miśkiewicz [Tue, 16 Dec 2014 14:56:17 +0000 (15:56 +0100)]
- update to latest intermediate compatibility https://wiki.mozilla.org/Security/Server_Side_TLS
Arkadiusz Miśkiewicz [Wed, 19 Nov 2014 12:08:18 +0000 (13:08 +0100)]
Yet keep ssl-unclean-shutdown for IE6-9.
Arkadiusz Miśkiewicz [Wed, 19 Nov 2014 12:04:13 +0000 (13:04 +0100)]
Limit badness only to IE2-5. See
http://blogs.msdn.com/b/ieinternals/archive/2011/03/26/https-and-connection-close-is-your-apache-modssl-server-configuration-set-to-slow.aspx
for more information. Found by zawadaa.
Arkadiusz Miśkiewicz [Mon, 20 Oct 2014 12:30:33 +0000 (14:30 +0200)]
- disable SSLv3 (poodle bug)
Elan Ruusamäe [Thu, 9 Oct 2014 06:49:54 +0000 (09:49 +0300)]
Merge branch 'feat/restart-delay-parameter'
Elan Ruusamäe [Tue, 7 Oct 2014 13:15:50 +0000 (16:15 +0300)]
add RESTART_DELAY parameter to sleep between stop and start
Arkadiusz Miśkiewicz [Tue, 12 Aug 2014 08:16:05 +0000 (10:16 +0200)]
- rel 2; fix multiline
Arkadiusz Miśkiewicz [Sun, 20 Jul 2014 17:49:15 +0000 (19:49 +0200)]
- up to 2.4.10
Elan Ruusamäe [Thu, 3 Jul 2014 13:51:48 +0000 (16:51 +0300)]
move .ht* and *~ access control to common conf where rest of access is configured
Arkadiusz Miśkiewicz [Thu, 3 Jul 2014 11:54:35 +0000 (13:54 +0200)]
Add EnableSendfile on. Prevent web clients from accessing htaccess files and backup files (~ so far).
Elan Ruusamäe [Fri, 6 Jun 2014 12:53:48 +0000 (15:53 +0300)]
Revert "- up to 2.4.7"
apr 1.4 works with this apache build as well
do not force upgrade as apr 1.5 requires newer kernel (2.6.28)
This reverts commit
b2a9152774b371f013b7af38975ba07f573d9e6b .
Conflicts:
apache.spec
Arkadiusz Miśkiewicz [Tue, 27 May 2014 09:04:14 +0000 (11:04 +0200)]
- rel 3; follow https://wiki.mozilla.org/Security/Server_Side_TLS
Arkadiusz Miśkiewicz [Tue, 27 May 2014 08:39:10 +0000 (10:39 +0200)]
- follow mozilla recomendation
Arkadiusz Miśkiewicz [Tue, 27 May 2014 08:10:52 +0000 (10:10 +0200)]
- add SNI example
Elan Ruusamäe [Mon, 26 May 2014 08:06:52 +0000 (11:06 +0300)]
trigger base on base; drop older triggers
Arkadiusz Miśkiewicz [Sun, 16 Mar 2014 17:30:45 +0000 (18:30 +0100)]
- up to 2.4.9; fixes CVE-2014-0098, CVE-2013-6438; dummy-connection merged upstream
Elan Ruusamäe [Thu, 27 Feb 2014 19:11:56 +0000 (21:11 +0200)]
drop duplicate triggerpostun base 2.4.0
Elan Ruusamäe [Thu, 27 Feb 2014 17:29:19 +0000 (19:29 +0200)]
tabs
Elan Ruusamäe [Mon, 3 Feb 2014 10:48:30 +0000 (10:48 +0000)]
include more common modules to base metapackage
Elan Ruusamäe [Mon, 3 Feb 2014 10:48:08 +0000 (10:48 +0000)]
all authn modules should require authn_core module (including ldap)
Elan Ruusamäe [Thu, 30 Jan 2014 21:48:04 +0000 (23:48 +0200)]
adapter
Arkadiusz Miśkiewicz [Sun, 24 Nov 2013 11:37:26 +0000 (12:37 +0100)]
- itk patches no longer needed (as apache now provides required hooks for itk mpm)
Arkadiusz Miśkiewicz [Sun, 24 Nov 2013 11:35:50 +0000 (12:35 +0100)]
- up to 2.4.7
Arkadiusz Miśkiewicz [Fri, 15 Nov 2013 18:30:52 +0000 (19:30 +0100)]
- rel 2; better way of dealing with children at graceful reload
Jakub Bogusz [Mon, 19 Aug 2013 16:29:05 +0000 (18:29 +0200)]
- pl cosmetic
Jan Rękorajski [Mon, 5 Aug 2013 17:35:28 +0000 (19:35 +0200)]
- updated to 2.4.6
- package mod_macro, mod_cache_socache and mod_proxy_wstunnel
Jan Rękorajski [Mon, 5 Aug 2013 17:16:05 +0000 (19:16 +0200)]
- make default config safe wrt mod_access_compat
Marcin Krol [Thu, 11 Jul 2013 14:57:38 +0000 (14:57 +0000)]
- updated and reenabled suexec_fcgi patch, added description
Marcin Krol [Thu, 11 Jul 2013 14:50:26 +0000 (14:50 +0000)]
- recreated for Apache 2.4.4
Mateusz Korniak [Tue, 11 Jun 2013 08:18:34 +0000 (10:18 +0200)]
- rel 5. mod_wsgi >= 3.4 is required for apache 2.4.
Arkadiusz Miśkiewicz [Fri, 7 Jun 2013 11:54:04 +0000 (13:54 +0200)]
- force new openssl version (to avoid runtime errors like undefined symbol: SRP_VBASE_free)
Arkadiusz Miśkiewicz [Sun, 19 May 2013 11:31:52 +0000 (13:31 +0200)]
- rel 4; make sure -n isn't true when MPM is empty
Jan Rękorajski [Sun, 19 May 2013 08:39:02 +0000 (10:39 +0200)]
- don't require mod_access_compat, it's better to break existing configs
than to hide access errors as mod_access_compat is completely
independent of mod_authz_host and may open up entire site
- rel 3
Arkadiusz Miśkiewicz [Thu, 9 May 2013 14:58:55 +0000 (16:58 +0200)]
- load mod_unixd after serverroot was set (so correct serverroot gets used)
Arkadiusz Miśkiewicz [Mon, 15 Apr 2013 12:29:51 +0000 (14:29 +0200)]
- rel 2; detect that children died and avoid doing dummy connection when unnecessary
Arkadiusz Miśkiewicz [Thu, 11 Apr 2013 10:14:02 +0000 (12:14 +0200)]
- don't process commented out entries
Arkadiusz Miśkiewicz [Wed, 10 Apr 2013 13:12:57 +0000 (15:12 +0200)]
Move SSLProtocol and SSLCipherSuite directives to be global default
(which can overrided on per vhost basis).
Arkadiusz Miśkiewicz [Wed, 10 Apr 2013 10:30:51 +0000 (12:30 +0200)]
- mod_deflate needs mod_filter now
Arkadiusz Miśkiewicz [Wed, 10 Apr 2013 07:41:10 +0000 (09:41 +0200)]
- seed some bytes of entropy instead of 0 bytes
Arkadiusz Miśkiewicz [Tue, 26 Feb 2013 12:01:11 +0000 (13:01 +0100)]
- up to 2.4.4; fixes CVE-2012-3499, CVE-2012-4558
Jakub Bogusz [Fri, 14 Dec 2012 21:20:46 +0000 (22:20 +0100)]
- updated ac version
Jakub Bogusz [Fri, 14 Dec 2012 21:08:20 +0000 (22:08 +0100)]
- pl for new modules, proper description for mod_authz_core
Arkadiusz Miśkiewicz [Wed, 5 Dec 2012 22:47:17 +0000 (23:47 +0100)]
- config updates from 2.4.3
Arkadiusz Miśkiewicz [Wed, 5 Dec 2012 22:28:48 +0000 (23:28 +0100)]
- rel 1; works here; upgrade from all-apache packages 2.2 to 2.4 worked; partial upgrade need more testing
Arkadiusz Miśkiewicz [Wed, 5 Dec 2012 21:49:46 +0000 (22:49 +0100)]
- add 2.4 triggerpostun; drop ac variants
Kacper Kornet [Thu, 23 Aug 2012 11:19:40 +0000 (12:19 +0100)]
- up to 2.4.3; fixes CVE-2012-3502 CVE-2012-2687 (sent by shadzik)
Jan Rękorajski [Sun, 24 Jun 2012 10:55:45 +0000 (10:55 +0000)]
- build and package mod_lua
Changed files:
apache.spec -> 1.683
lua-lib.patch -> 1.1
Jan Rękorajski [Sun, 24 Jun 2012 10:37:38 +0000 (10:37 +0000)]
- upated mod_proxy config and Requires
Changed files:
apache-mod_proxy.conf -> 1.11
apache.spec -> 1.682
Jan Rękorajski [Sun, 24 Jun 2012 10:30:04 +0000 (10:30 +0000)]
- verbose list mod_proxy files
Changed files:
apache.spec -> 1.681
Jan Rękorajski [Tue, 17 Apr 2012 16:56:39 +0000 (16:56 +0000)]
- better systemd deps
Changed files:
apache.spec -> 1.680
Arkadiusz Miśkiewicz [Tue, 17 Apr 2012 08:01:21 +0000 (08:01 +0000)]
- up to 2.4.2; fixes CVE-2012-0883
Changed files:
apache.spec -> 1.679
Artur Frysiak [Thu, 29 Mar 2012 07:15:21 +0000 (07:15 +0000)]
- fix for compilation with pcre 8.30
Changed files:
pcre8.30.patch -> 1.1
Elan Ruusamäe [Mon, 12 Mar 2012 10:48:53 +0000 (10:48 +0000)]
- sed -i needs to be separate arg
Changed files:
apache.spec -> 1.678
Elan Ruusamäe [Mon, 12 Mar 2012 10:43:09 +0000 (10:43 +0000)]
- strip ccache from confi_vars.mk. confuses php buildsystem (libtool needs --tag=CC passed is alternative fix there)
Changed files:
apache.spec -> 1.677
Elan Ruusamäe [Mon, 12 Mar 2012 10:17:26 +0000 (10:17 +0000)]
- move apxs to sbindir, everything in pld expects it to be there
Changed files:
apache.spec -> 1.676
Elan Ruusamäe [Sat, 10 Mar 2012 10:40:25 +0000 (10:40 +0000)]
- note 2.4 version
Changed files:
apache.init -> 1.72
Elan Ruusamäe [Sat, 10 Mar 2012 10:40:06 +0000 (10:40 +0000)]
- new modules todo
Changed files:
apache.spec -> 1.675
Elan Ruusamäe [Sat, 10 Mar 2012 10:24:19 +0000 (10:24 +0000)]
- sed triggers: just delete lines, not replace empty
Changed files:
apache.spec -> 1.674
Elan Ruusamäe [Sat, 10 Mar 2012 10:21:12 +0000 (10:21 +0000)]
- adapter
Changed files:
apache.spec -> 1.673
Adam Gołębiowski [Sun, 26 Feb 2012 23:53:03 +0000 (23:53 +0000)]
- not sure if we need fcgistarter to have suid bit set
Changed files:
apache.spec -> 1.672
Adam Gołębiowski [Sun, 26 Feb 2012 23:50:14 +0000 (23:50 +0000)]
- package fcgistarter
Changed files:
apache.spec -> 1.671
Adam Gołębiowski [Sun, 26 Feb 2012 21:48:33 +0000 (21:48 +0000)]
- mod_session_dbd += R: mod_dbd
Changed files:
apache.spec -> 1.670
Adam Gołębiowski [Sun, 26 Feb 2012 21:46:56 +0000 (21:46 +0000)]
- mod_session_* += R: mod_session
Changed files:
apache.spec -> 1.669
Adam Gołębiowski [Sun, 26 Feb 2012 21:45:51 +0000 (21:45 +0000)]
- mod_lbmethod_by* += R: mod_proxy (for mod_proxy_balancer)
Changed files:
apache.spec -> 1.668
Adam Gołębiowski [Sun, 26 Feb 2012 21:42:26 +0000 (21:42 +0000)]
- mod_watchdog, mod_status must be loaded before mod_heartbeat, mod_heartmonitor
Changed files:
apache.spec -> 1.667
Adam Gołębiowski [Sun, 26 Feb 2012 21:41:08 +0000 (21:41 +0000)]
- mod_heartbeat, mod_heartmonit += R: mod_status, mod_watchdog
Changed files:
apache.spec -> 1.666
Adam Gołębiowski [Sun, 26 Feb 2012 21:39:06 +0000 (21:39 +0000)]
- mod_authz_dbd += R: mod_dbd
Changed files:
apache.spec -> 1.665
Adam Gołębiowski [Sun, 26 Feb 2012 21:17:25 +0000 (21:17 +0000)]
- bogus chunk
Changed files:
apache-apxs.patch -> 1.12
Adam Gołębiowski [Sun, 26 Feb 2012 15:42:00 +0000 (15:42 +0000)]
- better description (from docs)
Changed files:
apache.spec -> 1.664
Adam Gołębiowski [Sun, 26 Feb 2012 15:17:37 +0000 (15:17 +0000)]
- triggers to ease upgrade to 2.4 (handles simple configuration properly)
Changed files:
apache.spec -> 1.663
Adam Gołębiowski [Sun, 26 Feb 2012 13:33:35 +0000 (13:33 +0000)]
- peruser mpm dropped almost 3 years ago
- event mpm no longer experimental, no need to bcond it
Changed files:
apache.spec -> 1.662
Adam Gołębiowski [Sun, 26 Feb 2012 13:26:13 +0000 (13:26 +0000)]
- mod_ssl R += mod_socache_shmcb (should be S:, but require it to ease upgrade from 2.2)
Changed files:
apache.spec -> 1.661
Adam Gołębiowski [Sun, 26 Feb 2012 12:48:46 +0000 (12:48 +0000)]
- mod_auth{n,z}_* require appropriate core module
Changed files:
apache.spec -> 1.660
Adam Gołębiowski [Sun, 26 Feb 2012 12:43:12 +0000 (12:43 +0000)]
- load unixd_module
Changed files:
apache-httpd.conf -> 1.62
Adam Gołębiowski [Sun, 26 Feb 2012 12:43:00 +0000 (12:43 +0000)]
- merge mod_unixd into -base, it's required anyway
Changed files:
apache.spec -> 1.659
Adam Gołębiowski [Sun, 26 Feb 2012 11:30:07 +0000 (11:30 +0000)]
- NameVirtualHost directive no longer has any effect
- SSLMutex replaced with Mutex which we already have defined in apache-mpm.conf
Changed files:
apache-mod_ssl.conf -> 1.21
Adam Gołębiowski [Sun, 26 Feb 2012 11:28:59 +0000 (11:28 +0000)]
- unused since 2.2.14-9
Changed files:
apache-mod_ssl-vhost.conf -> 1.20
Adam Gołębiowski [Sun, 26 Feb 2012 11:23:41 +0000 (11:23 +0000)]
- fix Obsoletes in mod_auth{n,z}_core
Changed files:
apache.spec -> 1.658
Adam Gołębiowski [Sun, 26 Feb 2012 11:16:07 +0000 (11:16 +0000)]
- mod_authn_alias merged into mod_authn_core
Changed files:
apache.spec -> 1.657
Adam Gołębiowski [Sun, 26 Feb 2012 10:46:18 +0000 (10:46 +0000)]
- fix mod_auth{n,z}_core summaries/descriptions
Changed files:
apache.spec -> 1.656
Adam Gołębiowski [Sun, 26 Feb 2012 10:37:44 +0000 (10:37 +0000)]
- mod_auth{n,z}_default were removed in 2.3.0, let _core replace them (not 100% accurate, but better than nothing)
Changed files:
apache.spec -> 1.655
Adam Gołębiowski [Sun, 26 Feb 2012 10:28:59 +0000 (10:28 +0000)]
- drop mpm related todo entries
Changed files:
apache.spec -> 1.654
Adam Gołębiowski [Sun, 26 Feb 2012 10:03:34 +0000 (10:03 +0000)]
- mod_authz_host += R: apache(mod_access_compat) [to ease upgrade from 2.2]
Changed files:
apache.spec -> 1.653
Adam Gołębiowski [Sun, 26 Feb 2012 09:32:20 +0000 (09:32 +0000)]
- merge mod_cache_disk into mod_cache package
Changed files:
apache.spec -> 1.652
Adam Gołębiowski [Sun, 26 Feb 2012 09:25:14 +0000 (09:25 +0000)]
- mod_disk_cache renamed to mod_cache_disk
- mod_mem_cache removed in 2.3.0
Changed files:
apache-mod_cache.conf -> 1.7
Adam Gołębiowski [Sun, 26 Feb 2012 09:05:31 +0000 (09:05 +0000)]
- 2.4 way of access control
Changed files:
apache-common.conf -> 1.10
apache-example.net.conf -> 1.5
apache-httpd.conf -> 1.61
apache-manual.conf -> 1.3
apache-mod_authz_host.conf -> 1.3
apache-mod_autoindex.conf -> 1.11
apache-mod_info.conf -> 1.10
apache-mod_proxy.conf -> 1.10
apache-mod_status.conf -> 1.9
apache-mod_userdir.conf -> 1.7
apache-multilang-errordoc.conf -> 1.3
Adam Gołębiowski [Sun, 26 Feb 2012 08:46:09 +0000 (08:46 +0000)]
- The NameVirtualHost directive no longer has any effect
Changed files:
apache-httpd.conf -> 1.60
Adam Gołębiowski [Sat, 25 Feb 2012 22:59:15 +0000 (22:59 +0000)]
- LockFile has been replaced with a Mutex directive
Changed files:
apache-mpm.conf -> 1.7
Adam Gołębiowski [Sat, 25 Feb 2012 22:54:30 +0000 (22:54 +0000)]
- MaxRequestsPerChild has been renamed to MaxConnectionsPerChild,
- MaxClients has been renamed to MaxRequestWorkers
Changed files:
apache-mpm.conf -> 1.6
Adam Gołębiowski [Sat, 25 Feb 2012 22:51:39 +0000 (22:51 +0000)]
- The DefaultType directive no longer has any effect
- include -> includeoptional
Changed files:
apache-httpd.conf -> 1.59
Adam Gołębiowski [Sat, 25 Feb 2012 22:49:45 +0000 (22:49 +0000)]
- mpm modules directives
Changed files:
apache-mpm.conf -> 1.5
Adam Gołębiowski [Sat, 25 Feb 2012 22:48:57 +0000 (22:48 +0000)]
- merge -mod_mpm_* into -base
Changed files:
apache.spec -> 1.651
Adam Gołębiowski [Sat, 25 Feb 2012 21:58:51 +0000 (21:58 +0000)]
- fix URLs in newly added modules
Changed files:
apache.spec -> 1.650
Adam Gołębiowski [Sat, 25 Feb 2012 21:55:40 +0000 (21:55 +0000)]
- base R: -mod_unixd (User directive)
Changed files:
apache.spec -> 1.649
Adam Gołębiowski [Sat, 25 Feb 2012 21:33:22 +0000 (21:33 +0000)]
- drop unused variable
Changed files:
apache.sysconfig -> 1.19
Adam Gołębiowski [Sat, 25 Feb 2012 21:32:34 +0000 (21:32 +0000)]
- one httpd to rule them all
Changed files:
apache.init -> 1.71
Adam Gołębiowski [Sat, 25 Feb 2012 21:16:19 +0000 (21:16 +0000)]
- link to 2.4 docs
Changed files:
apache.spec -> 1.648
Adam Gołębiowski [Sat, 25 Feb 2012 21:09:55 +0000 (21:09 +0000)]
- package new modules:
access_compat allowmethods auth_form authn_core authn_socache
authz_core authz_dbd buffer cache_disk data dialup heartbeat
heartmonitor lbmethod_bybusyness lbmethod_byrequests
lbmethod_bytraffic lbmethod_heartbeat log_debug mpm_event mpm_prefork
mpm_worker ratelimit reflector remoteip request sed session
session_cookie session_crypto session_dbd slotmem_plain slotmem_shm
socache_dbm socache_memcache socache_shmcb unixd watchdog xml2enc
- summaries taken from xml doc
- consider some grouping (mod_cache_disk and mod_cache, mod_lb*,
mod_session* and so on)
Changed files:
apache.spec -> 1.647
Adam Gołębiowski [Sat, 25 Feb 2012 19:54:47 +0000 (19:54 +0000)]
- sort module list
Changed files:
apache.spec -> 1.646
This page took 0.110074 seconds and 4 git commands to generate.