~ubuntu-branches/ubuntu/karmic/apache2/karmic-security : changes

~ubuntu-branches/ubuntu/karmic/apache2/karmic-security » Changes from revision 37

From Revision 37 to 18

Rev	Summary	Authors	Tags	Date
37	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - debian/{control,rules}: enable PIE hardening. - debian/{control,rules,apache2.2-common.ufw.profile}: add ufw profiles.	Kees Cook	2.2.9-7ubuntu1	15 years ago
36	* add ufw integration (see * add ufw integration (see https://wiki.ubuntu.com/UbuntuFirewall#Integrating%20UFW%20with%20Packages) (LP: #261198) - debian/control: suggest ufw for apache2.2-common - add apache2.2-common.ufw.profile with 3 profiles and install it to /etc/ufw/applications.d/apache2.2-common	Didier Roche	2.2.9-3ubuntu2	15 years ago
35	debian/{control,rules}: enable PIE hardening debian/{control,rules}: enable PIE hardening	Kees Cook	2.2.9-3ubuntu1	15 years ago
34	[ Stefan Fritsch ] [ Stefan Fritsch ] * Move NameVirtualHost directive to ports.conf and switch from "" to ":80". (Closes: #314606, #486286) * Comment out the CacheEnable line in disk_cache.conf. It would have caused problems with Etch to Lenny upgrades. * Change the minimum user id for suexec back to 100, the new value of 1000 was too disruptive for existing configurations. (Closes: #488821) * Add a default SSL virtual host. (Closes: #267477) - Use snakeoil certificate by default (if ssl-cert is installed). (Closes: #293524, #446765) - Document this in README.Debian. (Closes: #293469, #293519, #398520, #395823) - Add MSIE workarounds. (Closes: #421802) - Add ssl-cert to Recommends. * Add a new config file /etc/apache2/conf.d/security with some vaguely security related diectives. (Closes: #260063) * Adjust mod_userdir accordingly. Also add "AllowOverride Indexes" for the home directories. * Disable SSLv2 by default. It is insecure. Also only enable ciphers with key lengths of at least 128 bit. * Make the init script complain about a missing $APACHE_PID_FILE during "start", too, and not only during "stop" or "restart". This makes it more obvious that /etc/apache2/envvars has to be updated. (Closes: #473982) * Add hint about the "..., using 127.0.0.1 for ServerName" warning to README.Debian. (Closes: #457708) * Add hint about the "could not create rewrite_log_lock" error message to README.Debian. (Closes: #450831) * Remove empty dir from apache2-doc to fix Lintian warning. * Always pass -g to gcc instead of relying on dpkg-buildpackage to set CFLAGS. We always want the debug info for the apache2-dbg package. [ Ryan Niebur ] * Upgraded to policy 3.8.0 - added support for noopt in DEB_BUILD_OPTIONS - added a README.source - added support for parallel in DEB_BUILD_OPTIONS * Dropped XS- from the Vcs fields in control	Stefan Fritsch	2.2.9-3	15 years ago
33	* debian/config-dir/mods-available/disk_cache.conf: * debian/config-dir/mods-available/disk_cache.conf: Don't enable caching of the root URL by default when disk_cache is enabled. (LP: #219914). * debian/control: Update Maintainer field.	Mathias Gug	2.2.9-2ubuntu1	15 years ago
32	* Make the init script use normal 'stop' instead of 'gracefu... * Make the init script use normal 'stop' instead of 'graceful-stop' again: With graceful-stop, it can take a long time until all child processes have closed their listening sockets and there is no way for the init script to know when it is save to start apache again. This could make the restart of apache fail. (Closes: #486629, #463338) * Improve package descriptions, thanks to Justin B Rye. (Closes: #486855)	Stefan Fritsch	2.2.9-2	15 years ago
31	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - Dropped debian/patches/100_mpm_wokers_crash.dpatch. Already included upstream. (LP: #235294) - Dropped debian/patches/059_ssl_memleak_fix_PR44975.dpatch. Already included upstream. - Updated maintainer field according to spec.	Chuck Short	2.2.9-1ubuntu1	15 years ago
30	debian/apache2-2-common.postinst: Fix for index.html if it i... debian/apache2-2-common.postinst: Fix for index.html if it is a dangling symlink when doing an upgrade. (LP: #221932)	Chuck Short	2.2.8-4ubuntu2	15 years ago
29	* debian/patches/100_mpm_wokers_crash.dpatch * debian/patches/100_mpm_wokers_crash.dpatch - Fix for segmentation fault with mpm-worker is under load. Backported from http://svn.apache.org/viewvc?view=rev&revision=631362. (LP: #235294) * Modify Maintainer value to match the DebianMaintainerField specification.	Dustin Kirkland	2.2.8-4ubuntu1	15 years ago
28	* Urgency high for DoS vulnerability fix. * Urgency high for DoS vulnerability fix. * Fix memory leak in mod_ssl with zlib compression.	Stefan Fritsch	2.2.8-4	16 years ago
27	* mod_cache: Handle If-Range correctly if the cached resourc... * mod_cache: Handle If-Range correctly if the cached resource was stale (closes: #47065). * mod_autodindex: Use UTF-8 as character set for filenames in the default configuration. Change this in autoindex.conf if you are still using ISO-8859-1. * Introduce APACHE_RUN_DIR and APACHE_LOCK_DIR in apache2ctl. Also, make it use APACHE_RUN_USER instead of APACHE2_RUN_USER, to be consistent with apache2.conf. * Add 'status' function to init script (adapted from patch by Dustin Kirkland). * Don't build the modules three times. We are only shipping one set of them, anyway. (Inspired by the Fedora package.) * Remove Fabio M. Di Nitto from the uploaders field (thanks for your work).	Stefan Fritsch	2.2.8-3	16 years ago
26	* New upstream version: * New upstream version: - Fixes cross-site scripting issues in o mod_imagemap (CVE-2007-5000) o mod_status (CVE-2007-6388) o mod_proxy_balancer's balancer manager (CVE-2007-6421) - Fixes a denial of service issue in mod_proxy_balancer's balancer manager (CVE-2007-6422). - Fixes mod_proxy URL encoding in error messages (closes: #337325). - Adds explicit charset to the output of various modules to work around possible cross-site scripting flaws affecting web browsers that do not derive the response character set as required by RFC2616. For mod_proxy_ftp there is now the new ProxyFtpDirCharset directive to specify something else than ISO-8859-1 (CVE-2008-0005). - Adds mod_substitute which performs inline response content pattern matching (including regex) and substitution (like mod_line_edit). - Adds "DefaultType none" option. - Adds new "B" option to RewriteRule to suppress URL unescaping. - Adds an "if" directive for mod_include to test whether an URL is accessible, and if so, conditionally display content. - Adds support for mod_ssl to the event MPM. * Move the configuration of User, Group, and PidFile to /etc/apache2/envvars. This makes it easier to use these settings in scripts. /etc/apache2/envvars can now also be used to influence apache2ctl (inspired by Marc Haber's patch). (Closes: #349709, #460105, #458085) * Make apache2ctl check the configuration syntax before trying to restart apache, to match the behaviour documented in the man page. (Closes: #459236) * Convert docs to be directly viewable with a browser (and not use content negotiation). * Add doc-base entry for the documentation. (closes: #311269) * Don't ship default files in /var/www, but copy a sample file to /var/www/index.html on new installs. Also remove the now unneeded RedirectMatch line from sites-available/default. (Closes: #411774, #458093) * Add some information to README.Debian (Apache wiki, default virtual host) * Build with LDFLAGS=-Wl,--as-needed to drop a lot of unnecessary dependencies, easing library transitions (closes: #458857). * Add icons for OpenDocuments, add sharutils to Build-Depends for uudecode. Patch by Nicolas Valcárcel. (Closes: #436441) * Add reportbug script to list enabled modules. * Fix some lintian warnings: - Pass --no-start to dh_installinit instead of omitting the debhelper token in various maintainer scripts. Also move the update-rc.d call to apache2.2-common. - Add Short-Description to init script. * Remove unused apache2-mpm-prefork.prerm from source package and clean up debian/rules a bit. * Don't ship NEWS.Debian with apache2-utils, as the contents are only relevant for the server.	Stefan Fritsch	2.2.8-1	16 years ago
25	[ Nicolas Valcárcel ] [ Nicolas Valcárcel ] * Added icons for OpenDocuments by default on mime.conf (Closes: LP: #130836) * Icons added to the package in uuencode format * Added sharutils to Build-Depends on debian/control for uuencode * debian/apache2.2-common.apache2.init: - Only look for .conf files in /etc/apache2 when searching for pidfiles (Closes: LP: #112991) Thanks to Daniel Hahler for the patch [ Soren Hansen ] Clean up after OpenDocument icon generation	Soren Hansen	2.2.6-3ubuntu2	16 years ago
24	* Build with LDFLAGS=-Wl,--as-needed to drop a lot of unnece... * Build with LDFLAGS=-Wl,--as-needed to drop a lot of unnecessary dependencies (including db4.5). * Modify Maintainer value to match the DebianMaintainerField specification.	Martin Pitt	2.2.6-3ubuntu1	16 years ago
23	* Allocate fewer bucket brigades in case of a flush bucket. ... * Allocate fewer bucket brigades in case of a flush bucket. This might help with the memory leaks reported in #399776 and #421557. * Escape the HTTP method in error messages to avoid potential cross site scripting vulnerabilities (CVE-2007-6203). * Update 053_bad_file_descriptor_PR42829.dpatch to avoid a race condition. * Redirect /doc/apache2-doc/manual/ to /manual/ in the apache2-doc config (Closes: #450867). * Add icons for .ogg and .ogm (Closes: #255443). * Add comment about how to log X-Forwarded-For (Closes: #425008). * Make mod_proxy_balancer not depend on mod_cache. * Add Homepage field to debian/control. * Add/fix some lintian overrides, fix some warnings. * Bump Standards-Version (no changes).	Stefan Fritsch	2.2.6-3	16 years ago
22	* Avoid calling apr_pollset_poll() and accept_func() when th... * Avoid calling apr_pollset_poll() and accept_func() when the listening sockets have already been closed on graceful stop or reload. This hopefully fixes processes not being killed (closes: #445263, #447164) and the "Bad file descriptor: apr_socket_accept: (client socket)" error message (closes: #400918, #443310) * Allow logresolve to process long lines (Closes: #331631) * Remove duplicate config examples (Closes: #294662) * Include README.backtrace describing how to create a backtrace * Add CVE reference to 2.2.6-1 changelog entry	Stefan Fritsch	2.2.6-2	16 years ago
21	Trigger rebuild for hppa Trigger rebuild for hppa	LaMont Jones	2.2.4-3build1	16 years ago
20	[ Stefan Fritsch ] [ Stefan Fritsch ] * enable default site on new installs again (Closes: #436341) * make mod_authn_dbd depend on mod_dbd * make a2dissite return 0 if a site is already disabled (Closes: #435398) * make a2 scripts print errors to stderr (Closes: #435400) * move TypesConfig directive from apache2.conf to mime.conf (Closes: #434248) [ Adam Conrad ] * Special case apache2-dbg magic in debian/rules, so we don't do this on Ubuntu, which has an archive of detached debug packages.	Stefan Fritsch	2.2.4-3	16 years ago
19	debian/rules: Also remove apache2-dbg from debian/files on U... debian/rules: Also remove apache2-dbg from debian/files on Ubuntu, so that dpkg-genchanges does not choke.	Martin Pitt	2.2.4-2ubuntu2	16 years ago
18	debian/rules: Do not do the black magic for producing the -d... debian/rules: Do not do the black magic for producing the -dbg package on Ubuntu, since it breaks with pkg-create-dbgsym and is not needed for the same reason.	Martin Pitt	2.2.4-2ubuntu1	16 years ago

Older »