~ubuntu-branches/ubuntu/jaunty/apache2/jaunty-proposed

• Changes
• Files

~ubuntu-branches/ubuntu/jaunty/apache2/jaunty-proposed » Changes from revision 50

From Revision 50 to 31

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
50		* debian/patches/909_sslinsecurerenegotiation-directive.dpat... * debian/patches/909_sslinsecurerenegotiation-directive.dpatch: once   openssl gets updated to fix CVE-2009-3555, server renegotiations with   unpatched clients will fail. This patch adds the ability to revert to   the previous unsafe behaviour with a new SSLInsecureRenegotiation   directive. (LP: #616759) * debian/control: add specific dependency on first openssl version to get   CVE-2009-3555 fix.	Marc Deslauriers	2.2.11-2ubuntu2.7	13 years ago
49		* SECURITY UPDATE: denial of service via crafted request in ... * SECURITY UPDATE: denial of service via crafted request in mod_proxy_ajp   - debian/patches/907_CVE-2010-0408.dpatch: return the right error code     in modules/proxy/mod_proxy_ajp.c.   - CVE-2010-0408 * SECURITY UPDATE: information disclosure via improper handling of   headers in subrequests   - debian/patches/908_CVE-2010-0434.dpatch: use a copy of r->headers_in     in server/protocol.c.   - CVE-2010-0434	Marc Deslauriers	2.2.11-2ubuntu2.6	14 years ago
48		* SECURITY UPDATE: Reject client-initiated SSL/TLS renegotia... * SECURITY UPDATE: Reject client-initiated SSL/TLS renegotiations.   Partial fix for CVE-2009-3555. Configurations requiring renegotiation   of per-directory/location access controls are still affected until   OpenSSL is updated.   - debian/patches/904_CVE-2009-3555.dpatch: disable all client     renegotiations   - CVE-2009-3555 * SECURITY UPDATE: fix NULL pointer dereference in mod_proxy_ftp module   - debian/patches/905-CVE-2009-3094.dpatch: fix NULL pointer dereference     in mod_proxy_ftp.c/apr_socket_close() and potential buffer overread     in EPSV response parser   - CVE-2009-3094 * SECURITY UPDATE: fix access control bypass in mod_proxy_ftp when   configured as a reverse proxy   - debian/patches/906-CVE-2009-3095.dpatch: adjust proxy_ftp_handler()     in mod_proxy_ftp.c to fail if the decoded Basic credentials contain     special characters.   - CVE-2009-3095	Jamie Strandboge	2.2.11-2ubuntu2.5	14 years ago
47		* SECURITY UPDATE: remote denial of service in mod_deflate m... * SECURITY UPDATE: remote denial of service in mod_deflate module when   the network connection was closed before compression completed   - debian/patches/903_CVE-2009-1891.dpatch: update patch to fix     regression that caused segfaults under certain circumstances.     (LP: #409987)   - CVE-2009-1891	Marc Deslauriers	2.2.11-2ubuntu2.3	14 years ago
46		* SECURITY UPDATE: remote denial of service in the mod_proxy... * SECURITY UPDATE: remote denial of service in the mod_proxy module via   amount of streamed data that exceeds the Content-Length value   - debian/patches/902_CVE-2009-1890.dpatch: make sure Content-Length is     sane and check the length of the data in modules/proxy/mod_proxy_http.c   - CVE-2009-1890 * SECURITY UPDATE: remote denial of service in mod_deflate module when   the network connection was closed before compression completed   - debian/patches/903_CVE-2009-1891.dpatch: fail if the connection has     been aborted in server/core_filters.c   - CVE-2009-1891	Marc Deslauriers	2.2.11-2ubuntu2.2	14 years ago
45		* SECURITY UPDATE: response data disclosure in mod_proxy_ajp... * SECURITY UPDATE: response data disclosure in mod_proxy_ajp when a client   request with no request body was sent   - debian/patches/900_CVE-2009-1191.dpatch: adjust     modules/proxy/mod_proxy_ajp.c to not reuse a connection when the client     closes a connection without sending a body   - CVE-2009-1191 * SECURITY UPDATE: Includes option could be overridden via .htaccess file   when AllowOverride restrictions do not permit it   - debian/patches/900_CVE-2009-1195.dpatch: adjust server/config.c,     server/core.c, modules/filters/mod_include.c, include/http_core.h to     only enable .htaccess override when permitted.   - CVE-2009-1195	Jamie Strandboge	2.2.11-2ubuntu2.1	14 years ago
44		debian/patches/203_fix-ssi-timeftm-ignored.dpatch: debian/patches/203_fix-ssi-timeftm-ignored.dpatch:  Fix timefmt is ignored when XBitHack is on. (LP: #258914)	Chuck Short	2.2.11-2ubuntu2	15 years ago
43		* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes:   - debian/{contro,rules}: enable PIE hardening.   - debian/{control, rules, apache2.2-common.ufw.profile}: add ufw profiles.	Chuck Short	2.2.11-2ubuntu1	15 years ago
42		* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes:   - debian/{control, rules}: enable PIE hardening.   - debian/{control, rules, apache2.2-common.ufw.profile}: add ufw profiles.	Chuck Short	2.2.11-1ubuntu1	15 years ago
41		* Merge from debian unstable, remaining changes: (LP: #30337... * Merge from debian unstable, remaining changes: (LP: #303375)   - debian/{control, rules}: enable PIE hardening.   - debian/{control, rules, apache2.2-common.ufw.profile}: add ufw profiles.	Bhavani Shankar	2.2.9-11ubuntu1	15 years ago
40		* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes:   - debian/{control, rules}: enable PIE hardening.   - debian/{control, rules, apache2.2-common.ufw.profile}: add ufw profiles.	Chuck Short	2.2.9-10ubuntu1	15 years ago
39		Revert logrotate change since it will break it for everyone. Revert logrotate change since it will break it for everyone.	Chuck Short	2.2.9-7ubuntu3	15 years ago
38		debian/logrotate: Restart rather than reload for busy websit... debian/logrotate: Restart rather than reload for busy websites. (LP: #270899)	Chuck Short	2.2.9-7ubuntu2	15 years ago
37		* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes:   - debian/{control,rules}: enable PIE hardening.   - debian/{control,rules,apache2.2-common.ufw.profile}: add ufw profiles.	Kees Cook	2.2.9-7ubuntu1	15 years ago
36		* add ufw integration (see * add ufw integration (see   https://wiki.ubuntu.com/UbuntuFirewall#Integrating%20UFW%20with%20Packages)   (LP: #261198)   - debian/control: suggest ufw for apache2.2-common   - add apache2.2-common.ufw.profile with 3 profiles and install it to     /etc/ufw/applications.d/apache2.2-common	Didier Roche	2.2.9-3ubuntu2	15 years ago
35		debian/{control,rules}: enable PIE hardening debian/{control,rules}: enable PIE hardening	Kees Cook	2.2.9-3ubuntu1	15 years ago
34		[ Stefan Fritsch ] [ Stefan Fritsch ] * Move NameVirtualHost directive to ports.conf and switch from "*" to   "*:80". (Closes: #314606, #486286) * Comment out the CacheEnable line in disk_cache.conf. It would have caused   problems with Etch to Lenny upgrades. * Change the minimum user id for suexec back to 100, the new value of 1000   was too disruptive for existing configurations. (Closes: #488821) * Add a default SSL virtual host. (Closes: #267477)   - Use snakeoil certificate by default (if ssl-cert is installed).     (Closes: #293524, #446765)   - Document this in README.Debian.     (Closes: #293469, #293519, #398520, #395823)   - Add MSIE workarounds. (Closes: #421802)   - Add ssl-cert to Recommends. * Add a new config file /etc/apache2/conf.d/security with some vaguely   security related diectives. (Closes: #260063) * Adjust mod_userdir accordingly. Also add "AllowOverride Indexes" for the   home directories. * Disable SSLv2 by default. It is insecure. Also only enable ciphers with   key lengths of at least 128 bit. * Make the init script complain about a missing $APACHE_PID_FILE during   "start", too, and not only during "stop" or "restart". This makes it more   obvious that /etc/apache2/envvars has to be updated. (Closes: #473982) * Add hint about the "..., using 127.0.0.1 for ServerName" warning to   README.Debian. (Closes: #457708) * Add hint about the "could not create rewrite_log_lock" error message to   README.Debian. (Closes: #450831) * Remove empty dir from apache2-doc to fix Lintian warning. * Always pass -g to gcc instead of relying on dpkg-buildpackage to set   CFLAGS. We always want the debug info for the apache2-dbg package. [ Ryan Niebur ] * Upgraded to policy 3.8.0   - added support for noopt in DEB_BUILD_OPTIONS   - added a README.source   - added support for parallel in DEB_BUILD_OPTIONS * Dropped XS- from the Vcs fields in control	Stefan Fritsch	2.2.9-3	15 years ago
33		* debian/config-dir/mods-available/disk_cache.conf: * debian/config-dir/mods-available/disk_cache.conf:    Don't enable caching of the root URL by default when disk_cache is   enabled. (LP: #219914). * debian/control: Update Maintainer field.	Mathias Gug	2.2.9-2ubuntu1	15 years ago
32		* Make the init script use normal 'stop' instead of 'gracefu... * Make the init script use normal 'stop' instead of 'graceful-stop' again:   With graceful-stop, it can take a long time until all child processes have   closed their listening sockets and there is no way for the init script to   know when it is save to start apache again. This could make the restart of   apache fail. (Closes: #486629, #463338) * Improve package descriptions, thanks to Justin B Rye. (Closes: #486855)	Stefan Fritsch	2.2.9-2	15 years ago
31		* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes:   - Dropped debian/patches/100_mpm_wokers_crash.dpatch. Already included     upstream. (LP: #235294)   - Dropped debian/patches/059_ssl_memleak_fix_PR44975.dpatch. Already included      upstream.   - Updated maintainer field according to spec.	Chuck Short	2.2.9-1ubuntu1	15 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1