|
|
|
|
Changelog for httpd-2.2.0-5.1.2.i386.rpm :
* Mon Apr 03 2006 Eddy Nigg - Rebuild for StartCom Linux 5.0.x * Fri Feb 10 2006 Jesse Keating - (none):2.2.0-5.1.2- bump again for double-long bug on ppc(64) * Tue Feb 07 2006 Jesse Keating - (none):2.2.0-5.1.1- rebuilt for new gcc4.1 snapshot and glibc changes * Mon Feb 06 2006 Joe Orton 2.2.0-5.1- mod_auth_basic/mod_authn_file: if no provider is configured, and AuthUserFile is not configured, decline to handle authn silently rather than failing noisily. * Fri Feb 03 2006 Joe Orton 2.2.0-5- mod_ssl: add security fix for CVE-2005-3357 (#177914)- mod_imagemap: add security fix for CVE-2005-3352 (#177913)- add fix for AP_INIT_ * designated initializers with C++ compilers- httpd.conf: enable HTMLTable in default IndexOptions- httpd.conf: add more \"redirect-carefully\" matches for DAV clients * Thu Jan 05 2006 Joe Orton 2.2.0-4- mod_proxy_ajp: fix Cookie handling (Mladen Turk, r358769) * Fri Dec 09 2005 Jesse Keating - rebuilt * Wed Dec 07 2005 Joe Orton 2.2.0-3- strip manual to just English content * Mon Dec 05 2005 Joe Orton 2.2.0-2- don\'t strip C-L from HEAD responses (Greg Ames, #110552)- load mod_proxy_balancer by default- add proxy_ajp.conf to load/configure mod_proxy_ajp- Obsolete mod_jk- update docs URLs in httpd.conf/ssl.conf * Fri Dec 02 2005 Joe Orton 2.2.0-1- update to 2.2.0 * Wed Nov 30 2005 Joe Orton 2.1.10-2- enable mod_authn_alias, mod_authn_anon- update default httpd.conf * Fri Nov 25 2005 Joe Orton 2.1.10-1- update to 2.1.10- require apr >= 1.2.0, apr-util >= 1.2.0 * Wed Nov 09 2005 Tomas Mraz 2.0.54-16- rebuilt against new openssl * Thu Nov 03 2005 Joe Orton 2.0.54-15- log notice giving SELinux context at startup if enabled- drop SSLv2 and restrict default cipher suite in default SSL configuration * Fri Oct 21 2005 Joe Orton 2.0.54-14- mod_ssl: add security fix for SSLVerifyClient (CVE-2005-2700)- add security fix for byterange filter DoS (CVE-2005-2728)- add security fix for C-L vs T-E handling (CVE-2005-2088)- mod_ssl: add security fix for CRL overflow (CVE-2005-1268)- mod_ldap/mod_auth_ldap: add fixes from 2.0.x branch (upstream #34209 etc)- add fix for dummy connection handling (#167425)- mod_auth_digest: fix hostinfo comparison in CONNECT requests- mod_include: fix variable corruption in nested includes (upstream #12655)- mod_ssl: add fix for handling non-blocking reads- mod_ssl: fix to enable output buffering (upstream #35279)- mod_ssl: buffer request bodies for per-location renegotiation (upstream #12355) * Sun Aug 14 2005 Joe Orton 2.0.54-13- don\'t load by default: mod_cern_meta, mod_asis- do load by default: mod_ext_filter (#165893) * Fri Jul 29 2005 Joe Orton 2.0.54-12- drop broken epoch deps * Fri Jul 01 2005 Joe Orton 2.0.54-11- mod_dav_fs: fix uninitialized variable (#162144)- add epoch to dependencies as appropriate- mod_ssl: drop dependencies on dev, make- mod_ssl: mark post script dependencies as such * Tue May 24 2005 Joe Orton 2.0.54-10- remove broken symlink (Robert Scheck, #158404) * Thu May 19 2005 Joe Orton 2.0.54-9- add piped logger fixes (w/Jeff Trawick) * Tue May 10 2005 Joe Orton 2.0.54-8- drop old \"powered by Red Hat\" logos * Thu May 05 2005 Joe Orton 2.0.54-7- mod_userdir: fix memory allocation issue (upstream #34588)- mod_ldap: fix memory corruption issue (Brad Nicholes, upstream #34618) * Wed Apr 27 2005 Joe Orton 2.0.54-6- fix key/cert locations in post script * Tue Apr 26 2005 Joe Orton 2.0.54-5- create default dummy cert in /etc/pki/tls- use a pseudo-random serial number on the dummy cert- change default ssl.conf to point at /etc/pki/tls- merge back -suexec subpackage; SELinux policy can now be used to persistently disable suexec (#155716)- drop /etc/httpd/conf/ssl. * directories and Makefiles- unconditionally enable PIE support- mod_ssl: fix for picking up -shutdown options (upstream #34452) * Tue Apr 19 2005 Joe Orton 2.0.54-4- replace PreReq with Requires(pre) * Tue Apr 19 2005 Joe Orton 2.0.54-3- update to 2.0.54 * Wed Mar 30 2005 Joe Orton 2.0.53-6- update default httpd.conf: * clarify the comments on AddDefaultCharset usage (#135821) * remove all the AddCharset default extensions * don\'t load mod_imap by default * synch with upstream 2.0.53 httpd-std.conf- mod_ssl: set user from SSLUserName in access hook (upstream #31418)- htdigest: fix permissions of created files (upstream #33765)- remove htsslpass * Wed Mar 02 2005 Joe Orton 2.0.53-5- apachectl: restore use of $OPTIONS again * Wed Feb 09 2005 Joe Orton 2.0.53-4- update to 2.0.53- move prefork/worker modules comparison to %check * Mon Feb 07 2005 Joe Orton 2.0.52-7- fix cosmetic issues in \"service httpd reload\"- move User/Group higher in httpd.conf (#146793)- load mod_logio by default in httpd.conf- apachectl: update for correct libselinux tools locations * Tue Nov 16 2004 Joe Orton 2.0.52-6- add security fix for CVE CAN-2004-0942 (memory consumption DoS)- SELinux: run httpd -t under runcon in configtest (Steven Smalley)- fix SSLSessionCache comment for distcache in ssl.conf- restart using SIGHUP not SIGUSR1 after logrotate- add ap_save_brigade fix (upstream #31247)- mod_ssl: fix possible segfault in auth hook (upstream #31848)- add htsslpass(1) and configure as default SSLPassPhraseDialog (#128677)- apachectl: restore use of $OPTIONS- apachectl, httpd.init: refuse to restart if $HTTPD -t fails- apachectl: run $HTTPD -t in user SELinux context for configtest- update for pcre-5.0 header locations * Sat Nov 13 2004 Jeff Johnson 2.0.52-5- rebuild against db-4.3.21 aware apr-util. * Thu Nov 11 2004 Jeff Johnson 2.0.52-4- rebuild against db-4.3-21. * Wed Sep 29 2004 Joe Orton 2.0.52-3- add dummy connection address fixes from HEAD- mod_ssl: add security fix for CAN-2004-0885 * Wed Sep 29 2004 Joe Orton 2.0.52-2- update to 2.0.52 * Wed Sep 22 2004 Joe Orton 2.0.51-6- fix 2.0.51 regression in Satisfy merging (CAN-2004-0811) * Sun Sep 19 2004 Joe Orton 2.0.51-5- switch to Jeff Trawick\'s child reclaim timing logic patch- migration guide updates * Fri Sep 17 2004 Joe Orton 2.0.51-4- fix pcre includes * Fri Sep 17 2004 Joe Orton 2.0.51-3- update to 2.0.51 * Wed Sep 15 2004 Joe Orton 2.0.50-8- add improved child reclaim timing logic (#119128/#132360)- add BuildRequire zlib-devel for mod_deflate * Thu Sep 09 2004 Joe Orton 2.0.50-7- prereq rather than just require httpd from -suexec (#132045) * Mon Sep 06 2004 Joe Orton 2.0.50-6- include /etc/sysconfig/httpd template (#112085)- pass $OPTIONS in httpd invocations in apachectl (#115910)- do not pass $OPTIONS to apachectl from init script- start httpd in C locale by default from apachectl * Thu Sep 02 2004 Joe Orton 2.0.50-5- move manual configuration into conf.d/manual.conf (#131208)- add test_hook from HEAD, -t -DDUMP_CERTS for mod_ssl- document AddDefaultCharset change since 1.3 in migration.html * Wed Aug 18 2004 Joe Orton 2.0.50-4- start httpd in the C locale by default (#128002)- fix CustomLog comments in default httpd.conf (#43223)- ensure correct mod_suexec vs mod_userdir hook ordering (Joshua Slive, upstream #18156) * Wed Jun 30 2004 Joe Orton 2.0.50-3- update -proxy11 patch- explain where suexec went if SuexecUserGroup is used but /usr/sbin/suexec is not found * Wed Jun 30 2004 Joe Orton 2.0.50-1- update to 2.0.50 * Tue Jun 22 2004 Joe Orton 2.0.49-8- split out suexec into httpd-suexec package (#77972)- link to system pcreposix.h to fix including httpd.h * Thu Jun 17 2004 Joe Orton 2.0.49-7- don\'t install or use bundled pcreposix.h- bump default MaxClients to 256- drop default Timeout to 2 minutes- merge from upstream: * add fix for VirtualHost multiple address handling (Jeff Trawick) * Wed Jun 16 2004 Elliot Lee 2.0.49-6- rebuilt * Fri Jun 11 2004 Joe Orton 2.0.49-5- remove comments about ScoreBoardFile in httpd.conf- avoid redundant name lookup in pod code- mod_headers: add %{...}s feature for using SSL variables- mod_autoindex: don\'t truncate output on stat() failure (#117959)- mod_ssl: fix shmcb corruption with small caches (Geoff Thorpe)- mod_ssl: security fix for overflow in FakeBasicAuth (CVE CAN-2004-0488)- mod_deflate: fix memory consumption for large responses- check that suexec is setuid root (André Malo)- worker: add ThreadStackSize (Jeff Trawick) and ThreadGuardSize directives * Fri May 07 2004 Joe Orton 2.0.49-4- make \"noindex\" page valid XHTML 1.1 (Pascal Volk, #122020)- fix SEGV with no Listen directives (Michael Corcoran)- mod_cgi: synch with 2.0 backport proposed upstream * Fri Apr 23 2004 Joe Orton 2.0.49-3- conflict with older pcre (#121531)- include mod_ext_filter- mod_cgi: handle concurrent stderr/stdout from script * Fri Mar 26 2004 Joe Orton 2.0.49-2- mod_ssl: fix session cache memory leak (Madhu Mathihalli)- mod_ssl: fix SEGV when trying to shutdown during pool cleanup- merge the mod_proxy HTTP/1.1-compliance fixes- apply fix for #118020 * Thu Mar 18 2004 Joe Orton 2.0.49-1- update to 2.0.49 (#118798, thanks to Robert Scheck)- only link ab and mod_ssl against SSL_LIBS- open log files using APR_LARGEFILE where available * Wed Mar 17 2004 Joe Orton 2.0.48-18- add fix for #118020- ssl.conf tweaks: seed SSL PRNG with 256 bytes from /dev/urandom * Mon Mar 15 2004 Joe Orton 2.0.48-17- use \"SSLMutex default\" in default ssl.conf- limit to 128K XML request bodies in default httpd.conf; fix to give a 413 error not a 400 if the limit is exceeded- mod_rewrite: add %{SSL:...} and %{HTTPS} variable lookups- mod_dav: propagate executable property across COPY/MOVE- mod_dav: give 507 on out-of-space errors in more places- mod_ssl: add ssl_is_https optional function- mod_ssl: support indexed lookup of DN components- mod_ssl: optimised variable lookup- mod_ssl: install only minimal mod_ssl.h- worker: fix potential hang at restart * Tue Mar 02 2004 Elliot Lee 2.0.48-16.1- Rebuilt. * Mon Feb 23 2004 Joe Orton 2.0.48-16- fix apxs -q installbuilddir- really update to ab from HEAD- remove check that accept() returns an fd < FD_SETSIZE * Fri Feb 13 2004 Elliot Lee 2.0.48-15- Rebuilt. * Tue Feb 03 2004 Joe Orton 2.0.48-14- mod_dav: fix 401 on destination and reject unescaped fragment in URI- remove redundant ldconfig invocation from mod_ssl %post- remove unnecessary -headusage patch * Fri Jan 30 2004 Joe Orton 2.0.48-13- allow further customisation of init script (Peter Bieringer, #114619)- worker fixes from upstream- use basename(filename) in APLOG_MARK to reduce noise levels at \"LogLevel debug\" * Wed Jan 28 2004 Joe Orton 2.0.48-12- mod_ssl: cosmetic tweaks for pass phrase prompting- simplify rebranding a little * Tue Jan 27 2004 Joe Orton 2.0.48-11- trim pre-2.0 history from CHANGES to limit size * Tue Jan 27 2004 Joe Orton 2.0.48-10- update to ab from HEAD- remove dbmmanage man page (part of #114080)- mod_ssl: fix streaming nph- CGI scripts over SSL- mod_autoindex: fixes from 2.0 branch (André Malo)- add NameVirtualHost vs mod_ssl warning to httpd.conf (#114315)- mod_proxy: HTTP/1.1-compliance fixes from HEAD * Tue Jan 20 2004 Joe Orton 2.0.48-9- use a large BSS in the test PIE executable to trigger bugs early- tighten check on CPP output in MMN check (#113934) * Mon Jan 19 2004 Joe Orton 2.0.48-8- add man page fixes- mod_include: use parser rewrite+fixes from 2.0 branch (André Malo et al)- mod_ssl: add distcache support (Geoff Thorpe)- mod_ssl: SSL variable handling fixes for non-SSL connections (various)- allow linking modules against specific libraries found during configure * Mon Jan 19 2004 Joe Orton 2.0.48-7- hack to ensure that /usr/sbin/suexec gets stripped- merges from upstream: * fix for CVE CAN-2003-0020 (André Malo) * open log files read-only (Jeff Trawick) * mod_cgi: fix logging of script exec failure messages (Jeff Trawick) * mod_proxy: fix leak in request body handling (Larry Toppi)- merges from Taroon: * move away /var/www/html/index.html before upgrade from 1.3 (#70705) * allow upgrade from Stronghold 4.0 * migration guide updates * mod_log_config: fix logging of timezone (upstream #23642) * mod_ssl: restore readable error descriptions in error log * Mon Jan 19 2004 Joe Orton 2.0.48-6- fix httpd.init issues reported by Behdad Esfahbod- add fix for mod_usertrack (#113269)- automatically raise RLIMIT_CORE if CoreDumpDirectory is used- emit warning at end of %prep if PIE support is not enabled- add symlink to libtool script from build directory (#113720)- don\'t link suexec against the world * Sun Jan 04 2004 Joe Orton 2.0.48-5- use graceful restart in logrotate- bump default MaxRequestsPerChild for prefork to 4000- move vendor string for Server header into spec file- include mod_status extension hook and use it in mod_ssl to include SSL session cache statistics in server-status output * Thu Dec 18 2003 Joe Orton 2.0.48-4- rebuild * Sat Dec 13 2003 Jeff Johnson 2.0.48-3- rebuild against db-4.2.52. * Tue Oct 28 2003 Joe Orton 2.0.48-2- update to 2.0.48- includes security fix for CVE CAN-2003-0542- include mpm *.h to fix mod_fastcgi build (#108080)- increase DYNAMIC_MODULE_LIMIT to 128- re-enable ap_hack_ * export trimming patch- only use -export-dynamic when linking httpd, not suexec etc- don\'t load mod_unique_id by default * Fri Oct 24 2003 Joe Orton 2.0.47-10- httpd.conf: configure test page in welcome.conf, load suexec, don\'t use custom error docs by default, sync with upstream.- add \"Powered by Fedora\" icon (Garrett LeSage)- migration guide updates- drop mod_cgid- enable SSL_EXPERIMENTAL_ENGINE (#106858)- drop minimum suexec gid to 100 (#74753, #107083)- speed up graceful restarts in prefork (#105725)- mod_ssl fixes * Thu Oct 23 2003 Joe Orton 2.0.47-9- updated index.html (Matt Wilson, #107378)- change server version string comment to \"(Fedora)\" * Tue Oct 14 2003 Jeff Johnson 2.0.47-8.1- rebuild against db-4.2.42. * Thu Oct 09 2003 Joe Orton 2.0.47-8- use -fPIE not -fpie to fix s390x (Florian La Roche)- include VERSIONING in docdir * Tue Oct 07 2003 Joe Orton 2.0.47-7- enable PIE support- include bug fix for #78019 * Tue Sep 09 2003 Joe Orton 2.0.47-6- update httpd.conf for manual changes (alietssAATTyahoo.com, #101015)- use anonymous shm for LDAP auth cache (#103566) * Mon Sep 08 2003 Joe Orton 2.0.47-5- include unixd.h again- fix EXTRA_INCLUDES * Tue Jul 29 2003 Joe Orton 2.0.47-4- add mod_include fixes from upstream- httpd.conf updates: wording fixes from upstream; load mod_deflate by default, update AddLanguage section (#98455)- don\'t add eNULL cipher in default ssl.conf (#98401)- only bind to IPv4 addresses in default config (#98916) * Fri Jul 25 2003 Joe Orton 2.0.47-3- fix for segfaults in php-snmp init (#97207) * Thu Jul 24 2003 Joe Orton 2.0.47-2- fix apxs -c again * Tue Jul 15 2003 Joe Orton 2.0.47-1- update to 2.0.47- add mod_logio (#100436)- remove Vendor tag * Fri Jul 11 2003 Joe Orton 2.0.45-14- use libtool script included in apr- fix apxs -q LIBTOOL (more #92313) * Wed Jul 09 2003 Joe Orton 2.0.45-13- use system pcre library * Fri Jul 04 2003 Joe Orton 2.0.45-12- remove some installed headers- fix for use of libtool 1.5 * Fri Jun 06 2003 Elliot Lee - Rebuilt. * Fri Jun 06 2003 Joe Orton 2.0.45-10- fix apxs -g (#92313) * Sun Jun 01 2003 Joe Orton 2.0.45-9- trim manual sources properly- remove ExcludeArch * Fri May 30 2003 Joe Orton 2.0.45-8- rebuild * Tue May 20 2003 Joe Orton 2.0.45-6- don\'t load /usr/sbin/envvars from apxs- add fix for mod_dav_fs namespace handling- add fix for mod_dav If header etag comparison- remove irrelevant warning from mod_proxy- don\'t conflict with thttpd (#91422) * Mon May 19 2003 Joe Orton 2.0.45-5- don\'t package any XML sources in httpd-manual- fix examples in default httpd.conf for enabling caching * Mon May 19 2003 Joe Orton 2.0.45-4- change default charset to UTF-8 (#88964) * Fri May 16 2003 Joe Orton 2.0.45-3- update httpd.conf for changes from default in 2.0.45- include conf.d/ *.conf after loading standard modules- include LDAP and cache modules (#75370, #88277)- run buildconf in %build not %prep * Wed May 14 2003 Joe Orton 2.0.45-2- have apxs always use /usr/bin/libtool * Tue May 06 2003 Joe Orton 2.0.45-1- update to 2.0.45 (#82227)- use separate apr, apr-util packages (#74951)- mark logrotate file as noreplace (#85654)- mark all of /var/www/error as %config-not-noreplace- remove dates from error pages (#86474)- don\'t enable mod_cgid for worker MPM (#88819) * Thu May 01 2003 Elliot Lee 2.0.40-22- headusage patch to fix build on ppc64 etc. * Wed Apr 02 2003 Joe Orton 2.0.40-21.1- add security fixes for CAN-2003-0020, CAN-2003-0132, CAN-2003-0083- add security fix for file descriptor leaks, #82142- add bug fix for #82587 * Mon Feb 24 2003 Joe Orton 2.0.40-21- add security fix for CAN-2003-0020; replace non-printable characters with \'!\' when printing to error log.- disable debuginfo on IA64. * Tue Feb 11 2003 Joe Orton 2.0.40-20- disable POSIX semaphores to support 2.4.18 kernel (#83324) * Wed Jan 29 2003 Joe Orton 2.0.40-19- require xmlto 0.0.11 or later- fix apr_strerror on glibc2.3 * Wed Jan 22 2003 Tim Powers 2.0.40-18- Rebuilt. * Thu Jan 16 2003 Joe Orton 2.0.40-17- add mod_cgid and httpd binary built with worker MPM (#75496)- allow choice of httpd binary in init script- pick appropriate CGI module based on loaded MPM in httpd.conf- source /etc/sysconfig/httpd in apachectl to get httpd choice- make \"apachectl status\" fail gracefully when links isn\'t found (#78159) * Mon Jan 13 2003 Joe Orton 2.0.40-16- rebuild for OpenSSL 0.9.7 * Fri Jan 03 2003 Joe Orton 2.0.40-15- fix possible infinite recursion in config dir processing (#77206)- fix memory leaks in request body processing (#79282) * Thu Dec 12 2002 Joe Orton 2.0.40-14- remove unstable shmht session cache from mod_ssl- get SSL libs from pkg-config if available (Nalin Dahyabhai)- stop \"apxs -a -i\" from inserting AddModule into httpd.conf (#78676) * Wed Nov 06 2002 Joe Orton 2.0.40-13- fix location of installbuilddir in apxs when libdir!=/usr/lib * Wed Nov 06 2002 Joe Orton 2.0.40-12- pass libdir to configure; clean up config_vars.mk- package instdso.sh, fixing apxs -i (#73428)- prevent build if upstream MMN differs from mmn macro- remove installed but unpackaged files * Thu Oct 10 2002 Joe Orton 2.0.40-11- correct SERVER_NAME encoding in i18n error pages (thanks to Andre Malo) * Thu Oct 10 2002 Joe Orton 2.0.40-10- fix patch for CAN-2002-0840 to also cover i18n error pages * Thu Oct 03 2002 Joe Orton 2.0.40-9- security fixes for CAN-2002-0840 and CAN-2002-0843- fix for possible mod_dav segfault for certain requests * Wed Sep 25 2002 Gary Benson - updates to the migration guide * Thu Sep 05 2002 Nalin Dahyabhai 2.0.40-8- link httpd with libssl to avoid library loading/unloading weirdness * Wed Sep 04 2002 Joe Orton 2.0.40-7- add LoadModule lines for proxy modules in httpd.conf (#73349)- fix permissions of conf/ssl. */ directories; add Makefiles for certificate management (#73352) * Tue Sep 03 2002 Joe Orton 2.0.40-6- provide \"httpd-mmn\" to manage module ABI compatibility * Mon Sep 02 2002 Joe Orton 2.0.40-5- fix SSL session cache (#69699)- revert addition of LDAP support to apr-util * Tue Aug 27 2002 Joe Orton 2.0.40-4- set SIGXFSZ disposition to \"ignored\" (#69520)- make dummy connections to the first listener in config (#72692) * Tue Aug 27 2002 Joe Orton 2.0.40-3- allow \"apachectl configtest\" on a 1.3 httpd.conf- add mod_deflate- enable LDAP support in apr-util- don\'t package everything in /var/www/error as config(noreplace) * Thu Aug 22 2002 Bill Nottingham 2.0.40-2- add trigger (#68657) * Tue Aug 13 2002 Joe Orton 2.0.40-1- update to 2.0.40 * Thu Jul 25 2002 Joe Orton 2.0.36-8- improve comment on use of UserDir in default config (#66886) * Thu Jul 11 2002 Joe Orton 2.0.36-7- use /sbin/nologin as shell for apache user (#68371)- add patch from CVS to fix possible infinite loop when processing internal redirects * Thu Jun 27 2002 Gary Benson 2.0.36-6- modify init script to detect 1.3.x httpd.conf\'s and direct users to the migration guide * Wed Jun 26 2002 Gary Benson 2.0.36-5- patch apachectl to detect 1.3.x httpd.conf\'s and direct users to the migration guide- ship the migration guide * Sat Jun 22 2002 Joe Orton - move /etc/httpd2 back to /etc/httpd- add noindex.html page and poweredby logo; tweak default config to load noindex.html if no default \"/\" page is present.- add patch to prevent mutex errors on graceful restart * Sat Jun 22 2002 Tim Powers 2.0.36-4- automated rebuild * Thu Jun 13 2002 Joe Orton 2.0.36-3- add patch to fix SSL mutex handling * Thu Jun 13 2002 Joe Orton 2.0.36-2- improved config directory patch * Tue May 21 2002 Joe Orton - initial build; based heavily on apache.spec and mod_ssl.spec- fixes: #65214, #58490, #57376, #61265, #65518, #58177, #57245
|
|
|