~ubuntu-branches/ubuntu/intrepid/apache2/intrepid : changes

~ubuntu-branches/ubuntu/intrepid/apache2/intrepid » Changes from revision 39

From Revision 24 to 5

Rev	Summary	Authors	Tags	Date
24	* Build with LDFLAGS=-Wl,--as-needed to drop a lot of unnece... * Build with LDFLAGS=-Wl,--as-needed to drop a lot of unnecessary dependencies (including db4.5). * Modify Maintainer value to match the DebianMaintainerField specification.	Martin Pitt	2.2.6-3ubuntu1	16 years ago
23	* Allocate fewer bucket brigades in case of a flush bucket. ... * Allocate fewer bucket brigades in case of a flush bucket. This might help with the memory leaks reported in #399776 and #421557. * Escape the HTTP method in error messages to avoid potential cross site scripting vulnerabilities (CVE-2007-6203). * Update 053_bad_file_descriptor_PR42829.dpatch to avoid a race condition. * Redirect /doc/apache2-doc/manual/ to /manual/ in the apache2-doc config (Closes: #450867). * Add icons for .ogg and .ogm (Closes: #255443). * Add comment about how to log X-Forwarded-For (Closes: #425008). * Make mod_proxy_balancer not depend on mod_cache. * Add Homepage field to debian/control. * Add/fix some lintian overrides, fix some warnings. * Bump Standards-Version (no changes).	Stefan Fritsch	2.2.6-3	16 years ago
22	* Avoid calling apr_pollset_poll() and accept_func() when th... * Avoid calling apr_pollset_poll() and accept_func() when the listening sockets have already been closed on graceful stop or reload. This hopefully fixes processes not being killed (closes: #445263, #447164) and the "Bad file descriptor: apr_socket_accept: (client socket)" error message (closes: #400918, #443310) * Allow logresolve to process long lines (Closes: #331631) * Remove duplicate config examples (Closes: #294662) * Include README.backtrace describing how to create a backtrace * Add CVE reference to 2.2.6-1 changelog entry	Stefan Fritsch	2.2.6-2	16 years ago
21	Trigger rebuild for hppa Trigger rebuild for hppa	LaMont Jones	2.2.4-3build1	16 years ago
20	[ Stefan Fritsch ] [ Stefan Fritsch ] * enable default site on new installs again (Closes: #436341) * make mod_authn_dbd depend on mod_dbd * make a2dissite return 0 if a site is already disabled (Closes: #435398) * make a2 scripts print errors to stderr (Closes: #435400) * move TypesConfig directive from apache2.conf to mime.conf (Closes: #434248) [ Adam Conrad ] * Special case apache2-dbg magic in debian/rules, so we don't do this on Ubuntu, which has an archive of detached debug packages.	Stefan Fritsch	2.2.4-3	16 years ago
19	debian/rules: Also remove apache2-dbg from debian/files on U... debian/rules: Also remove apache2-dbg from debian/files on Ubuntu, so that dpkg-genchanges does not choke.	Martin Pitt	2.2.4-2ubuntu2	16 years ago
18	debian/rules: Do not do the black magic for producing the -d... debian/rules: Do not do the black magic for producing the -dbg package on Ubuntu, since it breaks with pkg-create-dbgsym and is not needed for the same reason.	Martin Pitt	2.2.4-2ubuntu1	16 years ago
17	* Modularize config: Move module specific configuration from... * Modularize config: Move module specific configuration from apache2.conf to mods-available/conf (Closes: #338472) Remove the NO_START kludge. Now you have to use rc.d symlinks to disable apache2. (Closes: #408462, #275561) Create run and lock directores in apache2ctl to make it work on fresh installations before the first call of the init script. Together with the previous item, this closes: #418499 * Disable AddDefaultCharset again (Closes: #397886) * Make ports.conf, conf.d/charset, and /etc/default/apache2 conffiles managed by dpkg * Listen on port 443 by default if mod_ssl is loaded (Closes: #404598) * Add logic to start htcacheclean as daemon or cronjob. The configuration is in /etc/default/apache2 * Fix security issues: - CVE-2007-3304: prevent parent process to send SIGUSR1 to arbitrary processes - CVE-2006-5752: XSS in mod_status * Add init.d dependency info from insserv overrides to /etc/init.d/apache2 * Replace apachectl with apache2ctl in docs (Closes: #164493) * Add usage message to apache2ctl (Closes: #359008) * Make -dev packages priority extra * Add secure example cipher/protocol configuration to ssl.conf * Update watch file (Closes: #433552) * Bump dh_compat to 5 * Add new package apache2-dbg with debugging symbols * Fix mod_cache returning 304 instead of 200 on HEAD requests	Stefan Fritsch	2.2.4-2	16 years ago
16	[ Stefan Fritsch ] [ Stefan Fritsch ] * Urgency medium for security fix * Fix CVE-2007-1863: DoS in mod_cache * New upstream version (Closes: #427050) - Fixes "proxy: error reading status line from remote server" (Closes: #410331) * Fix CVE-2007-1862: mod_mem_cache DoS (introduced in 2.2.4) * Change logrotate script to use reload instead of restart. (Closes: #298689) * chmod o-rx /var/log/apache2 (Closes: #291841) * chmod o-x suexec (Closes: #431048) * Update patch for truncated mod_cgi 500 responses from upstream SVN (Closes: #412580) * Don't use AddDefaultCharset for our docs (Closes: #414429) * fix options syntax in sites-available/default (Closes: #419539) * Move conf.d include to the end of apache2.conf (Closes: #305933) * Remove log, cache, and lock files on purge (Closes: #428887) * Ship /usr/lib/cgi-bin (Closes: #415698) * Add note to README.Debian how to read docs (Closes: #350822) * Document pid file name (Closes: #350286) * Update Standards-Version (no changes needed) * Fix some lintian warnings, add some overrides * Start apache when doing a "restart" even if it was not running (Closes: #384682) * reload config in apache2-doc postinst (Closes: #289289) * don't fail in prerm if apache is not running (Closes: #418536) * Suggest apache2-doc and www-browser (Closes: #399056) * Make init script always display a warning if NO_START=1 since VERBOSE=yes is not the default anymore (Closes: #430116) * Replace apache2(8) man page with a more current version * Add httxt2dbm(8) man page * Show -X option in help message (Closes: #391817) * remove sick-hack-to-update-modules * don't depend on procps on hurd (Closes: #431125) [ Peter Samuelson ] * Add shlibs:Depends to apache2.2-common.	Stefan Fritsch	2.2.4-1	16 years ago
15	[ Tollef Fog Heen ] [ Tollef Fog Heen ] * Fix up apache2-src so the .tar.gz contains an apache2 top level directory. * Make apache2 MPMs provide and conflict with apache2-mpm so other packages can provide MPMs too. * Get rid of 2.1 references from descriptions. (Closes: #400981) [ Thom May ] * Let the init script cope with multiple pid files correctly. Probably we shouldn't be doing this at all, but we might as well do it properly! (Closes: #396162) * Add a sensible autoindex default config * Add patch from upstream to ensure that mod_cgi 500 responses aren't truncated (Closes: #412580) * Use graceful-stop to shutdown apache to ensure we cope nicely with long running or blocked children [ Peter Samuelson ] * Ship apache2 manpage in apache2.2-common. (Closes: #391813) * Rearrange init script so that 'force-reload' is the same as 'reload'. (Closes: #401053) * Add Build-Depends: mawk. (Closes: #403682) * Add a needed <IfModule mod_include.c> guard to apache2.conf. (Closes: #407307) * Stop shipping /var/run/apache2/ as it is created at runtime anyway. * Move the /var/lock/apache2 owner fix from the apache2.2-common postinst to the init script, as /var/lock may not persist across reboots. (Closes: #420101) [ Stefan Fritsch ] * Add Build-Depends: libssl-dev, zlib1g-dev (Closes: #399043) * Add XS-Vcs-* to debian/control * Improve handling of empty $MODNAME in a2enmod (Closes: #422589) * Treat apache2-mpm-itk as prefork in a2enmod (Closes: #412602) * Re-add README.Debian and describe - the config dir layout (closes: #419552) - which files are ignored by Include - when and how to change "restart" to "reload" in the logrotate script * When purging, remove {mods,sites}-enabled symlinks and the config files created by postinst (Closes: #397789) * Fix suexec to log after a cgi error (Closes: #312385) * Add watch file * Add AddType for .bz2 (Closes: #416322) * Make init script messages conform better to policy (Closes: #390348) and exit with failure if called with unknown parameter (Closes: #412407) * Fix segfault in mod_proxy_ftp when FTP server sends back no spaces (Closes: #413727) * Ship /etc/apache2/conf.d/apache2-doc (Closes: #418464) * Tell the user when selecting cgid instead of cgi (Closes: #428058) * Add a2ensite/a2dissite man pages (Closes: #322385) * Comment out CacheEnable by default, to prevent filling up /var. Document the problem in README.Debian and NEWS.Debian, point to htcacheclean and give a warning when doing a2enmod disk_cache (Closes: #423653). * Add myself to Uploaders.	Stefan Fritsch	2.2.3-5	17 years ago
14	* High-urgency upload for RC bugfixes. * High-urgency upload for RC bugfixes. * Ack NMUs - thanks Andi, Steve. * Refactor apache2.2-common.postinst slightly, to account for sarge upgrades (since it's a new package name, rather than an upgrade). (Closes: #396782, #415775) * If mod_proxy was configured in sarge, add proxy_http and disk_cache modules, which used to be included in the mod_proxy config. (Closes: #407171)	Peter Samuelson	2.2.3-4	17 years ago
13	No-change upload for the libpq4->libpq5 transition. No-change upload for the libpq4->libpq5 transition.	Martin Pitt	2.2.3-3.2build1	17 years ago
12	* Non-maintainer upload. * Non-maintainer upload. * 043_ajp_connection_reuse: Patch from upstream Bugzilla, fixing a critical issue with regard to connection reuse in mod_proxy_ajp. Closes: #396265	Andreas Barth	2.2.3-3.2	17 years ago
11	* Add debian/patches/054_restore_prefix_fix: * Add debian/patches/054_restore_prefix_fix: - Fix autoconf macros to work with autoconf 2.60 (AC_CANONICAL_SYSTEM overwrites $@ in 2.60, see Debian bug #372179), so that the package builds again on recent Edgy. - Thanks to Daniel Schepler <schepler@math.berkeley.edu> for this patch (taken from Debian #374160) - Closes: LP#62242	Martin Pitt	2.0.55-4ubuntu4	17 years ago
10	* SECURITY UPDATE: Remote DoS, potential remote code executi... * SECURITY UPDATE: Remote DoS, potential remote code execution. * Add debian/patches/053_mod_rewite_CVE-2006-3747: - Fix off-by-one buffer overflow in mod_rewrite's ldap scheme handler. - Reported by Mark Dowd of McAfee Avert Labs. - CVE-2006-3747	Martin Pitt	2.0.55-4ubuntu3	17 years ago
9	Include patch from SVN HEAD to make sure LFS works on 64-bit... Include patch from SVN HEAD to make sure LFS works on 64-bit platforms where sendfile() doesn't like dealing with anything larger than 32-bit chunks. Yes, Linux 2.6, I'm looking at you (see: launchpad.net/11850)	Adam Conrad	2.0.55-4ubuntu2	18 years ago
8	Restore the "a2enmod userdir" that went missing in the "cruf... Restore the "a2enmod userdir" that went missing in the "cruft cleaning" in the last upload, since it's required to sanely configure new setups.	Adam Conrad	2.0.55-4ubuntu1	18 years ago
7	* Add 050_mod_imap_CVE-2005-3352 to escape untrusted referer... * Add 050_mod_imap_CVE-2005-3352 to escape untrusted referer headers in mod_imap before outputting HTML to avoid XSS attacks; see CVE-2005-3352 * Add 051_mod_ssl_CVE-2005-3357 to avoid a remote denial of service in threaded MPMs when making a non-SSL connection to an SSL-enabled port on a server with a custom 400 error document defined; see CVE-2005-3357 * Clean up our use of trailing slashes on directories in debian/rules, so the newer, pickier, obviously very improved coreutils doesn't bite us. * Remove some cruft from apache2-common's postinst, dealing with upgrade scenarios from versions older than those released in Sarge or Warty. * Use "SHELL := sh -e" in debian/rules, so the build will stop on shell errors, instead of blundering on to later make targets (closes: #340761) * Recreate /var/run/apache2 and /var/lock/apache2 in our init script, in case the user has /var/run and /var/lock on tmpfs, which is fasionable. * Make our init script a /bin/bash script instead of a /bin/sh script, so we can abuse it with regex globbing (#348189, #347962, #340955, #342008) * Take patch from Adrian Bridgett to output errors from our config test in the init script, but only do so when we're VERBOSE (closes: #339323) * In the spirit of the LSB, make our init script exit 2 when called with incorrect arguments, and exit 4 when asked for status (closes: #330275) * Fix the default site to not mix configuration syntax (closes: #345922) * Mention apxs2 in the apache2-*-dev long descriptions (closes: #307921)	Adam Conrad	2.0.55-4	18 years ago
6	Rebuild for libstdc++ allocator change Rebuild for libstdc++ allocator change	Matthias Klose	2.0.55-3build1	18 years ago
5	Brown paper bag release: Tidy up CFLAGS and APR configure ca... Brown paper bag release: Tidy up CFLAGS and APR configure call to make sure that what we link to agrees with what apu-config tells others to do.	Adam Conrad	2.0.55-3	18 years ago

Older »