~mojocode/apache2/peruser : changes

~mojocode/apache2/peruser » Changes from revision 67

From Revision 67 to 48

Rev	Summary	Authors	Tags	Date
67	Integrate MPM Peruser 0.4.0rc3 (v16) Integrate MPM Peruser 0.4.0rc3 (v16)	Morton Jonuschat		12 years ago
66	Integrate MPM Peruser 0.4.0rc2 Integrate MPM Peruser 0.4.0rc2	Morton Jonuschat		12 years ago
65	Integrate MPM Peruser 0.4.0rc1 Integrate MPM Peruser 0.4.0rc1	Morton Jonuschat		12 years ago
64	* SECURITY UPDATE: Range header DoS vulnerability * SECURITY UPDATE: Range header DoS vulnerability - debian/patches/207_CVE-2011-3192.dpatch: filter out large byte ranges and improve memory efficiency in handling buckets. (thanks to Debian and upstream) - CVE-2011-3192 * Include fix for regressions introduced by above patch: - debian/patches/208_CVE-2011-3192_regression.dpatch: return 206 and 416 response codes where appropriate (see deban bug 639825)	Steve Beattie	2.2.14-5ubuntu8.6	12 years ago
63	* SECURITY UPDATE: denial of service via request that lacks ... * SECURITY UPDATE: denial of service via request that lacks a path in mod_cache and mod_dav. - debian/patches/201_CVE-2010-1452.dpatch: fix path handling in modules/cache/cache_storage.c and modules/dav/main/util.c. - CVE-2010-1452	Marc Deslauriers	2.2.14-5ubuntu8.4	13 years ago
62	* debian/patches/211-sslinsecurerenegotiation-directive.dpat... * debian/patches/211-sslinsecurerenegotiation-directive.dpatch: once openssl gets updated to fix CVE-2009-3555, server renegotiations with unpatched clients will fail. This patch adds the ability to revert to the previous unsafe behaviour with a new SSLInsecureRenegotiation directive. (LP: #616759) * debian/control: add specific dependency on first openssl version to get CVE-2009-3555 fix.	Marc Deslauriers	2.2.14-5ubuntu8.2	13 years ago
61	debian/patches/210-backport-mod-reqtimeout-ftbfs.dpatch: Add... debian/patches/210-backport-mod-reqtimeout-ftbfs.dpatch: Add missing mod_reqtime.so (LP: #562370)	Chuck Short	2.2.14-5ubuntu8	14 years ago
60	* debian/patches/206-fix-potential-memory-leaks.dpatch: Fix ... * debian/patches/206-fix-potential-memory-leaks.dpatch: Fix potential memory leaks by making sure to not destroy bucket brigades that have been created by earlier filters. Backported from 2.2.15. * debian/patches/206-report-max-client-mpm-worker.dpatch: Don't report server has reached MaxClients until it has. Backported from 2.2.15 * debian/config-dir/apache2.conf: Make the Files ~ "^\.ht" block in apache2.conf more secure by adding Satisfy all. (Debian bug: #572075) * debian/rules, debian/patches/209-backport-mod-reqtimeout.dpatch, debian/config2-dir/mods-available/reqtimeout.load, debian/config2-dir/mods-available/reqtimeout.conf debian/NEWS : Backport the mod-reqtimeout module from 2.2.15, this will mitigate apache slowloris bug in apache. Enable it by default. (LP: #392759)	Chuck Short	2.2.14-5ubuntu7	14 years ago
59	debian/apache2.2-common.apache2.init: Fix thinko. (LP: #5516... debian/apache2.2-common.apache2.init: Fix thinko. (LP: #551681)	Chuck Short	2.2.14-5ubuntu6	14 years ago
58	Revert 99-fix-mod-dav-permissions.dpatch Revert 99-fix-mod-dav-permissions.dpatch	Chuck Short	2.2.14-5ubuntu5	14 years ago
57	* debian/patches/99-fix-mod-dav-permissions.dpatch: Fix perm... * debian/patches/99-fix-mod-dav-permissions.dpatch: Fix permisisons when downloading files from webdav (LP: #540747) * debian/apache2.2-common.apache2.init: Add graceful restart (LP: #456381)	Chuck Short	2.2.14-5ubuntu4	14 years ago
56	* SECURITY UPDATE: denial of service via crafted request in ... * SECURITY UPDATE: denial of service via crafted request in mod_proxy_ajp - debian/patches/204_CVE-2010-0408.dpatch: return the right error code in modules/proxy/mod_proxy_ajp.c. - CVE-2010-0408 * SECURITY UPDATE: information disclosure via improper handling of headers in subrequests - debian/patches/205_CVE-2010-0434.dpatch: use a copy of r->headers_in in server/protocol.c. - CVE-2010-0434	Marc Deslauriers	2.2.14-5ubuntu3	14 years ago
55	debian/patches/203_fix-ab-segfault.dpatch: Fix segfaulting a... debian/patches/203_fix-ab-segfault.dpatch: Fix segfaulting ab when using really wacky options. (LP: #450501)	Chuck Short	2.2.14-5ubuntu2	14 years ago
54	* Merge from debian testing. Remaining changes: LP: #506862 * Merge from debian testing. Remaining changes: LP: #506862 - debian/{control, rules}: Enable PIE hardening. - debian/{control, rules, apache2.2-common.ufw.profile}: Add ufw profiles. - debian/control: Add bzr tag and point it to our tree.	Bhavani Shankar	2.2.14-5ubuntu1	14 years ago
53	* Resynchronzie with Debian, remaining changes are: * Resynchronzie with Debian, remaining changes are: - debian/{control, rules}: Enable PIE hardening. - debian/{control, rules, pache2.2-common.ufw.profile}: Add ufw profiles. - debian/control: Add bzr tag and point it to our tree.	Chuck Short	2.2.14-4ubuntu1	14 years ago
52	* Merge from debian testing, remaining changes: * Merge from debian testing, remaining changes: - debian/{control, rules}: Enable PIE hardening. - debian/{control, rules, pache2.2-common.ufw.profile}: Add ufw profiles. - debian/conrol: Add bzr tag and point it to our tree. - removed debian/patches/203_fix_legacy_ap_rputs_segfaults.dpatch: it was already dropped from 00list, so just remove the patch entirely	Jamie Strandboge	2.2.14-2ubuntu1	14 years ago
51	* Merge from debian testing, remaining changes: * Merge from debian testing, remaining changes: - debian/{control, rules}: Enable PIE hardening. - debian/{control, rules, pache2.2-common.ufw.profile}: Add ufw profiles. - debian/conrol: Add bzr tag and point it to our tree. - Dropped debian/patches/203_fix_legacy_ap_rputs_segfaults.dpatch: Already applied upstream.	Chuck Short	2.2.14-1ubuntu1	14 years ago
50	* debian/patches/203_fix_legacy_ap_rputs_segfaults.dpatch: * debian/patches/203_fix_legacy_ap_rputs_segfaults.dpatch: - Fix potential segfaults with the use of the legacy ap_rputs() etc interfaces, in cases where an output filter fails. This happens frequently after CVE-2009-1891 got fixed. (LP: #409987)	Marc Deslauriers	2.2.12-1ubuntu2	14 years ago
49	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - debian/{control,rules}: enable PIE hardening. - debian/{control, rules, apache2.2-common.ufw.profile}: add ufw profiles. - Dropped debian/patches/203_fix-ssl-timeftm-ignored.dpatch.	Chuck Short	2.2.12-1ubuntu1	14 years ago
48	* Merge from debian unstable, remaining changes: LP: #398130 * Merge from debian unstable, remaining changes: LP: #398130 - debian/patches/203_fix-ssl-timeftm-ignored.dpatch: Fix timefmt is ignored when XBitHack is on. (LP: #258914) - debian/{control,rules}: enable PIE hardening. - debian/{control, rules, apache2.2-common.ufw.profile}: add ufw profiles.	Bhavani Shankar	2.2.11-7ubuntu1	14 years ago

Older »