|
|
|
|
Changelog for mod_ssl-2.2.15-39.el6.centos.x86_64.rpm :
Wed Oct 15 14:00:00 2014 Johnny Hughes - 2.2.15-39.el6.centos - Roll in CentOS Branding
Tue Aug 5 14:00:00 2014 Jan Kaluza - 2.2.15-39 - mod_proxy: close client connection if the backend closes connection (#1111410)
Thu Jul 17 14:00:00 2014 Jan Kaluza - 2.2.15-38 - mod_cgid: add security fix for CVE-2014-0231 - mod_deflate: add security fix for CVE-2014-0118 - mod_status: add security fix for CVE-2014-0226
Fri Jun 27 14:00:00 2014 Joe Orton - 2.2.15-37 - mod_ssl: fix SSLCipherSuite (#1035818)
Mon Jun 23 14:00:00 2014 Jan Kaluza - 2.2.15-36 - mod_ssl: Add a wildcard common name match (#1035666) - mod_cache: avoid thundering herd (#1094990) - mod_cgi: return error code 408 on timeout (#979129)
Mon Jun 23 14:00:00 2014 Jan Kaluza - 2.2.15-35 - mod_proxy_http: cleanup bucket brigade even on error (#991556) - add missing Reason-Phrase in HTTP response headers (#1032733) - mod_ldap: fix crash in uldap_cache_getattrvals (#1048757)
Fri Jun 20 14:00:00 2014 Joe Orton - 2.2.15-34 - mod_ssl: prevent use of AECDH (#1035818)
Fri Jun 20 14:00:00 2014 Joe Orton - 2.2.15-33 - mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1103115)
Thu Jun 19 14:00:00 2014 Joe Orton - 2.2.15-32 - mod_ssl: adjust DH temp key selection, prefer larger and up to 8192-bit. (#1071883)
Tue Jun 10 14:00:00 2014 Jan Kaluza - 2.2.15-31 - mod_proxy: fix bybusyness algorithm to balance the load after failed worker has recovered (#972949) - mod_proxy: ignore EINTR when polling in proxy_connect (#976644) - mod_proxy_http: log \"reading response\" error to proper log file (#1012766) - mod_ssl: add ECDH support (#1035818) - mod_ssl: improve DH temp key handling (#1071883) - mod_ssl: enable support at run-time for TLSv1.x with newer OpenSSL (#1034984) - mod_ssl: fix crash when loaded for first time during the reload (#876626) - mod_ssl: make lazy CRL caching configurable (#1037832) - apachectl status: return exit code 3 when httpd is not running (#1077336)
Thu Mar 20 13:00:00 2014 Jan Kaluza - 2.2.15-30 - mod_dav: add security fix for CVE-2013-6438 (#1078175) - mod_log_config: add security fix for CVE-2014-0098 (#1078175)
Fri Aug 2 14:00:00 2013 Jan Kaluza - 2.2.15-29 - mod_dav: add security fix for CVE-2013-1896 (#991369)
Mon Apr 29 14:00:00 2013 Joe Orton - 2.2.15-28 - mod_rewrite: add security fix for CVE-2013-1862 (#953729)
Thu Mar 7 13:00:00 2013 - 2.2.15-27 - add security fixes for CVE-2012-3499, CVE-2012-4558 (#915883, #915884)
Wed Dec 5 13:00:00 2012 Jan Kaluza - 2.2.15-26 - htcacheclean: exit with code 4 also for \"restart\" action (#805810)
Mon Dec 3 13:00:00 2012 Jan Kaluza - 2.2.15-25 - htcacheclean: exit with code 4 if nonprivileged user runs initscript (#805810) - rotatelogs: omit the second arg when invoking a post-rotate program (#876923)
Thu Nov 8 13:00:00 2012 Joe Orton - 2.2.15-24 - mod_ssl: improved patch for mod_nss fallback (w/mharmsen, #805720)
Wed Nov 7 13:00:00 2012 Jan Kaluza - 2.2.15-23 - mod_log_config: fix cookie parsing substring mismatch (#867268)
Mon Oct 22 14:00:00 2012 Jan Kaluza - 2.2.15-22 - mod_cache: fix header merging for 304 case, thanks to Roy Badami (#868283) - mod_cache: fix handling of 304 responses (#868253)
Thu Oct 18 14:00:00 2012 Jan Kaluza - 2.2.15-21 - mod_proxy_ajp: ignore flushing if headers have not been sent (#853160) - mod_proxy_ajp: do not mark worker in error state when one request timeouts (#864317) - mod_ssl: do not run post script if all files are already created (#752618)
Mon Oct 15 14:00:00 2012 Joe Orton - 2.2.15-20 - add htcacheclean init script (Jan Kaluza, #805810)
Mon Sep 17 14:00:00 2012 Joe Orton - 2.2.15-19 - mod_ssl: fall back on another module\'s proxy hook if mod_ssl proxy is not configured. (#805720)
Wed Sep 5 14:00:00 2012 Joe Orton - 2.2.15-18 - add security fix for CVE-2012-2687 (#850794)
Mon Sep 3 14:00:00 2012 Jan Kaluza - 2.2.15-17 - mod_proxy: allow change BalancerMember state in web interface (#748400) - mod_proxy: Tone down \"worker [URL] used by another worker\" warning (#787247) - mod_proxy: add support for \"failonstatus\" option (#824571) - mod_proxy: avoid DNS lookup on hostname from request URI if ProxyRemote * is configured (#837086) - rotatelogs: create files even if they are empty (#757739) - rotatelogs: option to rotate files into a custom location (#757735) - rotatelogs: add support for -L option (#838493) - fix handling of long chunk-line (#842376) - add server aliases to \"httpd -S\" output (#833092) - omit %posttrans daemon restart if /etc/sysconfig/httpd-disable-posttrans exists (#833064) - mod_ldap: treat LDAP_UNAVAILABLE as a transient error (#829689) - ab: fix double free when SSL request fails in verbose mode (#837613) - mod_cache: do not cache partial results (#822587) - mod_ldap: add LDAPReferrals directive alias (#796958) - mod_ssl: add _userID DN variable suffix for NID_userId (#842375) - mod_ssl: fix test for missing decrypted private keys, and ensure that the keypair matches (#848954) - mod_authnz_ldap: set AUTHORIZE_ * variables in LDAP authorization (#828896) - relax checks for status-line validity (#853348)
Mon Feb 6 13:00:00 2012 Joe Orton - 2.2.15-16 - add security fixes for CVE-2011-4317, CVE-2012-0053, CVE-2012-0031, CVE-2011-3607 (#787599) - obviates fix for CVE-2011-3638, patch removed
Thu Oct 6 14:00:00 2011 Joe Orton - 2.2.15-15 - mod_proxy_ftp: fix handling of EPSV w/IPv6 localhost (#737960) - core: add security fix for CVE-2011-3368 (#743659) - mod_proxy_ajp: add security fix for CVE-2011-3348 (#738961) - mod_cache: forward-port CacheMaxExpire \"hard\" option (#740242)
Wed Sep 28 14:00:00 2011 Joe Orton - 2.2.15-14 - update to byterange patch (#736592)
Thu Sep 8 14:00:00 2011 Joe Orton - 2.2.15-13 - add security fix for CVE-2011-3192 (#733063, #736592)
Mon Aug 8 14:00:00 2011 Joe Orton - 2.2.15-12 - mod_ssl: ignore SNI hints unless required by config (#714704) - mod_ssl: fix segfault with bad SSLCryptoDevice argument (#729585)
Tue Jul 26 14:00:00 2011 Joe Orton - 2.2.15-11 - rebase mod_reqtimeout to 2.2.17 (#676634) - mod_proxy_ajp: honour ProxyErrorOverride (#694939) - mod_ssl: add fix for handling incomplete lines w/revproxy (#700074) - mod_filter: fix matching against non-std response headers (#700075) - core: abort() on malloc() failure (#700393) - mod_ssl: fix startup crash w/client cert shared across vhosts (#720980)
Tue Jun 7 14:00:00 2011 Joe Orton - 2.2.15-10 - mod_filter: fix test against non-standard response headers (#700075)
Fri Apr 8 14:00:00 2011 Joe Orton - 2.2.15-9 - mod_ssl: complete fix for overlapping memcpy (#652335)
Mon Mar 21 13:00:00 2011 Joe Orton - 2.2.15-8 - mod_ssl: fix compat with FIPS-enabled OpenSSL (#684144)
Thu Feb 24 13:00:00 2011 Joe Orton - 2.2.15-7 - mod_ldap: fix caching with per-vhost directive use (#676635) - mod_ssl: fix startup with duplicate SSL vhost configurations (#676831) - prefork: ensure early child exit during graceful restart (#679476)
Mon Jan 31 13:00:00 2011 Joe Orton - 2.2.15-6 - ab: fail gracefully for OOM allocating stats structures (#645846) - init script: use $STOP_DELAY as delay before SIGKILL of parent (#657480) - stop multiple invocations of filter init functions (#631849) - mod_ssl: avoid overlapping memcpy (#652335) - mark httpd.conf as noreplace
Fri Aug 13 14:00:00 2010 Joe Orton - 2.2.15-5 - add security fix for CVE-2010-1452 (#618193)
Wed Jun 23 14:00:00 2010 Joe Orton - 2.2.15-4 - use init script to rotate logs (#606955) - disable keepalive for 100-continue and error response (#606964)
Tue May 25 14:00:00 2010 Joe Orton - 2.2.15-3 - add \"Satisfy All\" for .htaccess in httpd.conf (#594981) - adjust user/group creation in %pre (#594395) - mod_ssl: tweak OID() evaluation of unknown exts (#594980)
Thu May 6 14:00:00 2010 Joe Orton - 2.2.15-2 - init script fixes for LSB compliance (#546252) * exit code 2 for an unknown script argument * exit code 6 for a reload if config-test fails * exit code 7 for a reload on a stopped service * fixed help output to cover all options - mod_dav: handle PUT failure more cleanly (#572911)
Thu Mar 11 13:00:00 2010 Joe Orton - 2.2.15-1 - update to 2.2.15 (#570465, #570442) - fix version string (#572140) - mod_ssl: use ASN1_STRING_print() in SSLRequire\'s OID() (#552942) - prevent use of rsync during \"make install\" (#557049) - load mod_version by default in httpd.conf
Tue Feb 9 13:00:00 2010 Joe Orton - 2.2.14-5 - mod_ssl: fix CVE-2009-3555 backport (#563119) - mod_authnz_ldap: fix for dynamic group support - mod_ssl: add SSLInsecureRenegotiation directive (#561435)
Thu Jan 14 13:00:00 2010 Joe Orton - 2.2.14-4 - mod_ssl: add further mitigation for CVE-2009-3555 - drop proxy_ajp.conf - update httpd.conf: decrease Timeout to 1m, update LoadModule directives, bump worker to 4 proc/300clients - fix hard-coded default pidfile to match default config (#547629) - drop legacy X-Pad header from short responses (#526110) - disable keepalive for Expect: 100-continue and error response (#533407) - mod_ext_filter: fix spurious error log output (#479463) - mod_rewrite: don\'t serialize logfile access (#493023) - fix spurious error messages on graceful restart (#233955) - mod_ssl: fix potential hang in renegotiation (#510515) - mod_proxy_connect: support use SSL client connection (#523594)
Wed Dec 9 13:00:00 2009 Joe Orton - 2.2.14-3 - add \'ServerTokens Full-Release\' config option (#477006)
Tue Dec 8 13:00:00 2009 Joe Orton - 2.2.14-2 - drop distcache support
Thu Dec 3 13:00:00 2009 Joe Orton - 2.2.14-1 - update to 2.2.14 - relax permissions on /var/run/httpd (#495780) - Requires(pre): httpd in mod_ssl subpackage (#543275) - add partial security fix for CVE-2009-3555 (#533125)
Tue Sep 8 14:00:00 2009 Joe Orton 2.2.13-2 - restart service in posttrans (#491567)
Fri Aug 21 14:00:00 2009 Tomas Mraz - 2.2.13-2 - rebuilt with new openssl
Tue Aug 18 14:00:00 2009 Joe Orton 2.2.13-1 - update to 2.2.13
Fri Jul 24 14:00:00 2009 Fedora Release Engineering - 2.2.11-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
Tue Jun 16 14:00:00 2009 Joe Orton 2.2.11-9 - build -manual as noarch
Tue Mar 17 13:00:00 2009 Joe Orton 2.2.11-8 - fix pidfile in httpd.logrotate (thanks to Rainer Traut) - don\'t build mod_mem_cache or mod_file_cache
Tue Feb 24 13:00:00 2009 Fedora Release Engineering - 2.2.11-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
Thu Jan 22 13:00:00 2009 Joe Orton 2.2.11-6 - Require: apr-util-ldap (#471898) - init script changes: pass pidfile to status(), use status() in condrestart (#480602), support try-restart as alias for condrestart - change /etc/httpd/run symlink to have destination /var/run/httpd, and restore \"run/httpd.conf\" as default PidFile (#478688)
Fri Jan 16 13:00:00 2009 Tomas Mraz 2.2.11-5 - rebuild with new openssl
Sat Dec 27 13:00:00 2008 Robert Scheck 2.2.11-4 - Made default configuration using /var/run/httpd for pid file
Thu Dec 18 13:00:00 2008 Joe Orton 2.2.11-3 - update to 2.2.11 - package new /var/run/httpd directory, and move default pidfile location inside there
Tue Oct 21 14:00:00 2008 Joe Orton 2.2.10-2 - update to 2.2.10
Tue Jul 15 14:00:00 2008 Joe Orton 2.2.9-5 - move AddTypes for SSL cert/CRL types from ssl.conf to httpd.conf (#449979)
Mon Jul 14 14:00:00 2008 Joe Orton 2.2.9-4 - use Charset=UTF-8 in default httpd.conf (#455123) - only enable suexec when appropriate (Jim Radford, #453697)
Thu Jul 10 14:00:00 2008 Tom \"spot\" Callaway 2.2.9-3 - rebuild against new db4 4.7
Tue Jul 8 14:00:00 2008 Joe Orton 2.2.9-2 - update to 2.2.9 - build event MPM too
Wed Jun 4 14:00:00 2008 Joe Orton 2.2.8-4 - correct UserDir directive in default config (#449815)
Tue Feb 19 13:00:00 2008 Fedora Release Engineering - 2.2.8-3 - Autorebuild for GCC 4.3
Tue Jan 22 13:00:00 2008 Joe Orton 2.2.8-2 - update to 2.2.8 - drop mod_imagemap
Wed Dec 5 13:00:00 2007 Release Engineering - 2.2.6-4 - Rebuild for openssl bump
Mon Sep 17 14:00:00 2007 Joe Orton 2.2.6-3 - add fix for SSL library string regression (PR 43334) - use powered-by logo from system-logos (#250676) - preserve timestamps for installed config files
Fri Sep 7 14:00:00 2007 Joe Orton 2.2.6-2 - update to 2.2.6 (#250757, #282761)
Sun Sep 2 14:00:00 2007 Joe Orton 2.2.4-10 - rebuild for fixed APR
Wed Aug 22 14:00:00 2007 Joe Orton 2.2.4-9 - rebuild for expat soname bump
Tue Aug 21 14:00:00 2007 Joe Orton 2.2.4-8 - fix License - require /etc/mime.types (#249223)
Thu Jul 26 14:00:00 2007 Joe Orton 2.2.4-7 - drop -tools dependency on httpd (thanks to Matthias Saou)
Wed Jul 25 14:00:00 2007 Joe Orton 2.2.4-6 - split out utilities into -tools subpackage, based on patch by Jason Tibbs (#238257)
Tue Jul 24 14:00:00 2007 Joe Orton 2.2.4-5 - spec file cleanups: provide httpd-suexec, mod_dav; don\'t obsolete mod_jk; drop trailing dots from Summaries - init script * add LSB info header, support force-reload (#246944) * update description * drop 1.3 config check * pass $pidfile to daemon and pidfile everywhere
Wed May 9 14:00:00 2007 Joe Orton 2.2.4-4 - update welcome page branding
Tue Apr 3 14:00:00 2007 Joe Orton 2.2.4-3 - drop old triggers, old Requires, xmlto BR - use Requires(...) correctly - use standard BuildRoot - don\'t mark init script as config file - trim CHANGES further
Mon Mar 12 13:00:00 2007 Joe Orton 2.2.4-2 - update to 2.2.4 - drop the migration guide (#223605)
Thu Dec 7 13:00:00 2006 Joe Orton 2.2.3-8 - fix path to instdso.sh in special.mk (#217677) - fix detection of links in \"apachectl fullstatus\"
Tue Dec 5 13:00:00 2006 Joe Orton 2.2.3-7 - rebuild for libpq soname bump
Sat Nov 11 13:00:00 2006 Joe Orton 2.2.3-6 - rebuild for BDB soname bump
Mon Sep 11 14:00:00 2006 Joe Orton 2.2.3-5 - updated \"powered by Fedora\" logo (#205573, Diana Fong) - tweak welcome page wording slightly (#205880)
Fri Aug 18 14:00:00 2006 Jesse Keating - 2.2.3-4 - rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc * (#203001)
Thu Aug 3 14:00:00 2006 Joe Orton 2.2.3-3 - init: use killproc() delay to avoid race killing parent
Fri Jul 28 14:00:00 2006 Joe Orton 2.2.3-2 - update to 2.2.3 - trim %changelog to >=2.0.52
Thu Jul 20 14:00:00 2006 Joe Orton 2.2.2-8 - fix segfault on dummy connection failure at graceful restart (#199429)
Wed Jul 19 14:00:00 2006 Joe Orton 2.2.2-7 - fix \"apxs -g\"-generated Makefile - fix buildconf with autoconf 2.60
Wed Jul 12 14:00:00 2006 Jesse Keating - 2.2.2-5.1 - rebuild
Wed Jun 7 14:00:00 2006 Joe Orton 2.2.2-5 - require pkgconfig for -devel (#194152) - fixes for installed support makefiles (special.mk et al) - BR autoconf
Fri Jun 2 14:00:00 2006 Joe Orton 2.2.2-4 - make -devel package multilib-safe (#192686)
Thu May 11 14:00:00 2006 Joe Orton 2.2.2-3 - build DSOs using -z relro linker flag
Wed May 3 14:00:00 2006 Joe Orton 2.2.2-2 - update to 2.2.2
Thu Apr 6 14:00:00 2006 Joe Orton 2.2.0-6 - rebuild to pick up apr-util LDAP interface fix (#188073)
Fri Feb 10 13:00:00 2006 Jesse Keating - (none):2.2.0-5.1.2 - bump again for double-long bug on ppc(64)
Tue Feb 7 13:00:00 2006 Jesse Keating - (none):2.2.0-5.1.1 - rebuilt for new gcc4.1 snapshot and glibc changes
Mon Feb 6 13:00:00 2006 Joe Orton 2.2.0-5.1 - mod_auth_basic/mod_authn_file: if no provider is configured, and AuthUserFile is not configured, decline to handle authn silently rather than failing noisily.
Fri Feb 3 13:00:00 2006 Joe Orton 2.2.0-5 - mod_ssl: add security fix for CVE-2005-3357 (#177914) - mod_imagemap: add security fix for CVE-2005-3352 (#177913) - add fix for AP_INIT_ * designated initializers with C++ compilers - httpd.conf: enable HTMLTable in default IndexOptions - httpd.conf: add more \"redirect-carefully\" matches for DAV clients
Thu Jan 5 13:00:00 2006 Joe Orton 2.2.0-4 - mod_proxy_ajp: fix Cookie handling (Mladen Turk, r358769)
Fri Dec 9 13:00:00 2005 Jesse Keating - rebuilt
Wed Dec 7 13:00:00 2005 Joe Orton 2.2.0-3 - strip manual to just English content
Mon Dec 5 13:00:00 2005 Joe Orton 2.2.0-2 - don\'t strip C-L from HEAD responses (Greg Ames, #110552) - load mod_proxy_balancer by default - add proxy_ajp.conf to load/configure mod_proxy_ajp - Obsolete mod_jk - update docs URLs in httpd.conf/ssl.conf
Fri Dec 2 13:00:00 2005 Joe Orton 2.2.0-1 - update to 2.2.0
Wed Nov 30 13:00:00 2005 Joe Orton 2.1.10-2 - enable mod_authn_alias, mod_authn_anon - update default httpd.conf
Fri Nov 25 13:00:00 2005 Joe Orton 2.1.10-1 - update to 2.1.10 - require apr >= 1.2.0, apr-util >= 1.2.0
Wed Nov 9 13:00:00 2005 Tomas Mraz 2.0.54-16 - rebuilt against new openssl
Thu Nov 3 13:00:00 2005 Joe Orton 2.0.54-15 - log notice giving SELinux context at startup if enabled - drop SSLv2 and restrict default cipher suite in default SSL configuration
Thu Oct 20 14:00:00 2005 Joe Orton 2.0.54-14 - mod_ssl: add security fix for SSLVerifyClient (CVE-2005-2700) - add security fix for byterange filter DoS (CVE-2005-2728) - add security fix for C-L vs T-E handling (CVE-2005-2088) - mod_ssl: add security fix for CRL overflow (CVE-2005-1268) - mod_ldap/mod_auth_ldap: add fixes from 2.0.x branch (upstream #34209 etc) - add fix for dummy connection handling (#167425) - mod_auth_digest: fix hostinfo comparison in CONNECT requests - mod_include: fix variable corruption in nested includes (upstream #12655) - mod_ssl: add fix for handling non-blocking reads - mod_ssl: fix to enable output buffering (upstream #35279) - mod_ssl: buffer request bodies for per-location renegotiation (upstream #12355)
Sat Aug 13 14:00:00 2005 Joe Orton 2.0.54-13 - don\'t load by default: mod_cern_meta, mod_asis - do load by default: mod_ext_filter (#165893)
Thu Jul 28 14:00:00 2005 Joe Orton 2.0.54-12 - drop broken epoch deps
Thu Jun 30 14:00:00 2005 Joe Orton 2.0.54-11 - mod_dav_fs: fix uninitialized variable (#162144) - add epoch to dependencies as appropriate - mod_ssl: drop dependencies on dev, make - mod_ssl: mark post script dependencies as such
Mon May 23 14:00:00 2005 Joe Orton 2.0.54-10 - remove broken symlink (Robert Scheck, #158404)
Wed May 18 14:00:00 2005 Joe Orton 2.0.54-9 - add piped logger fixes (w/Jeff Trawick)
Mon May 9 14:00:00 2005 Joe Orton 2.0.54-8 - drop old \"powered by Red Hat\" logos
Wed May 4 14:00:00 2005 Joe Orton 2.0.54-7 - mod_userdir: fix memory allocation issue (upstream #34588) - mod_ldap: fix memory corruption issue (Brad Nicholes, upstream #34618)
Tue Apr 26 14:00:00 2005 Joe Orton 2.0.54-6 - fix key/cert locations in post script
Mon Apr 25 14:00:00 2005 Joe Orton 2.0.54-5 - create default dummy cert in /etc/pki/tls - use a pseudo-random serial number on the dummy cert - change default ssl.conf to point at /etc/pki/tls - merge back -suexec subpackage; SELinux policy can now be used to persistently disable suexec (#155716) - drop /etc/httpd/conf/ssl. * directories and Makefiles - unconditionally enable PIE support - mod_ssl: fix for picking up -shutdown options (upstream #34452)
Mon Apr 18 14:00:00 2005 Joe Orton 2.0.54-4 - replace PreReq with Requires(pre)
Mon Apr 18 14:00:00 2005 Joe Orton 2.0.54-3 - update to 2.0.54
Tue Mar 29 14:00:00 2005 Joe Orton 2.0.53-6 - update default httpd.conf: * clarify the comments on AddDefaultCharset usage (#135821) * remove all the AddCharset default extensions * don\'t load mod_imap by default * synch with upstream 2.0.53 httpd-std.conf - mod_ssl: set user from SSLUserName in access hook (upstream #31418) - htdigest: fix permissions of created files (upstream #33765) - remove htsslpass
Wed Mar 2 13:00:00 2005 Joe Orton 2.0.53-5 - apachectl: restore use of $OPTIONS again
Wed Feb 9 13:00:00 2005 Joe Orton 2.0.53-4 - update to 2.0.53 - move prefork/worker modules comparison to %check
Mon Feb 7 13:00:00 2005 Joe Orton 2.0.52-7 - fix cosmetic issues in \"service httpd reload\" - move User/Group higher in httpd.conf (#146793) - load mod_logio by default in httpd.conf - apachectl: update for correct libselinux tools locations
Tue Nov 16 13:00:00 2004 Joe Orton 2.0.52-6 - add security fix for CVE CAN-2004-0942 (memory consumption DoS) - SELinux: run httpd -t under runcon in configtest (Steven Smalley) - fix SSLSessionCache comment for distcache in ssl.conf - restart using SIGHUP not SIGUSR1 after logrotate - add ap_save_brigade fix (upstream #31247) - mod_ssl: fix possible segfault in auth hook (upstream #31848) - add htsslpass(1) and configure as default SSLPassPhraseDialog (#128677) - apachectl: restore use of $OPTIONS - apachectl, httpd.init: refuse to restart if $HTTPD -t fails - apachectl: run $HTTPD -t in user SELinux context for configtest - update for pcre-5.0 header locations
Sat Nov 13 13:00:00 2004 Jeff Johnson 2.0.52-5 - rebuild against db-4.3.21 aware apr-util.
Thu Nov 11 13:00:00 2004 Jeff Johnson 2.0.52-4 - rebuild against db-4.3-21.
Tue Sep 28 14:00:00 2004 Joe Orton 2.0.52-3 - add dummy connection address fixes from HEAD - mod_ssl: add security fix for CAN-2004-0885
Tue Sep 28 14:00:00 2004 Joe Orton 2.0.52-2 - update to 2.0.52
|
|
|