~ubuntu-branches/ubuntu/natty/apache2/natty-security

• Changes
• Files

~ubuntu-branches/ubuntu/natty/apache2/natty-security » Changes from revision 70

From Revision 70 to 51

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
70		* SECURITY UPDATE: arbitrary code execution via crafted SetE... * SECURITY UPDATE: arbitrary code execution via crafted SetEnvIf   directive (LP: #811422)   - debian/patches/215_CVE-2011-3607.dpatch: validate length in     server/util.c.   - CVE-2011-3607 * SECURITY UPDATE: another mod_proxy reverse proxy exposure   - debian/patches/216_CVE-2011-4317.dpatch: validate additional URIs in     modules/mappers/mod_rewrite.c, modules/proxy/mod_proxy.c,     server/protocol.c.   - CVE-2011-4317 * SECURITY UPDATE: denial of service via invalid cookie   - debian/patches/217_CVE-2012-0021.dpatch: check name and value in     modules/loggers/mod_log_config.c.   - CVE-2012-0021 * SECURITY UPDATE: denial of service and possible code execution via   type field modification within a scoreboard shared memory segment   - debian/patches/218_CVE-2012-0031.dpatch: check type field in     server/scoreboard.c.   - CVE-2012-0031 * SECURITY UPDATE: cookie disclosure via Bad Request errors   - debian/patches/219_CVE-2012-0053.dpatch: check lengths in     server/protocol.c.   - CVE-2012-0053	Marc Deslauriers	2.2.17-1ubuntu1.5	12 years ago
69		* SECURITY UPDATE: mod_proxy reverse proxy exposure (LP: #87... * SECURITY UPDATE: mod_proxy reverse proxy exposure (LP: #877740)   - debian/patches/212_CVE-2011-3368.dpatch: return 400     on invalid requests. (patch courtesy of Michael Jeanson)   - debian/patches/214_CVE-2011-3368_part2.dpatch: fix same for http     0.9 protocol   - CVE-2011-3368 * SECURITY UPDATE: mod_proxy_ajp denial of service (LP: #871674)   - debian/patches/213_CVE-2011-3348.dpatch: return     HTTP_NOT_IMPLEMENTED when AJP_EBAD_METHOD is requested   - CVE-2011-3348 * SECURITY UPDATE: mpm-itk failure to drop privileges in certain   configurations   - debian/mpm-itk/patches/11-CVE-2011-1176.patch: merge     configurations correctly   - CVE-2011-1176 * Include additional fixes for regressions introduced by   CVE-2011-3192 fixes   - debian/patches/084_CVE-2011-3192_regression_part2.dpatch:     take upstream fixes for byterange_filter.c through the 2.2.21     release except for the added MaxRanges configuration option along     with a fix staged for 2.2.22.	Steve Beattie	2.2.17-1ubuntu1.4	12 years ago
68		* SECURITY UPDATE: Range header DoS vulnerability * SECURITY UPDATE: Range header DoS vulnerability   - debian/patches/083_CVE-2011-3192.dpatch: filter out large     byte ranges and improve memory efficiency in handling buckets.     (thanks to Debian and upstream)   - CVE-2011-3192 * Include fix for regressions introduced by above patch:   - debian/patches/084_CVE-2011-3192_regression.dpatch: return 206     and 416 response codes where appropriate (see deban bug 639825)	Steve Beattie	2.2.17-1ubuntu1.2	12 years ago
67		* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes:   - debian/{control, rules}: Enable PIE hardening.   - debian/{control, rules, apache2.2-common.ufw.profile}: Add ufw profiles.   - debian/control: Add bzr tag and point it to our tree   - debain/apache2.py, debian/apache2.2-common.isntall: Add apport hook.   - debian/control, debian/ask-for-passphrase, debian/config-dir/mods-available/ssl.conf:     Plymouth aware passphrase dialog program ask-for-passphrase.	Chuck Short	2.2.17-1ubuntu1	13 years ago
66		debian/rules: Don't use "-fno-strict-aliasing" since it caus... debian/rules: Don't use "-fno-strict-aliasing" since it causes apache FTBFS on amd64. (LP: #711293)	Chuck Short	2.2.16-6ubuntu3	13 years ago
65		debian/rules: Use "-fno-strict-aliasing" to work around a gc... debian/rules: Use "-fno-strict-aliasing" to work around a gcc bug. (LP: #697105)	Chuck Short	2.2.16-6ubuntu2	13 years ago
64		* Merge from debian unstable. Remaining changes: * Merge from debian unstable.  Remaining changes:   - debian/{control, rules}: Enable PIE hardening.   - debian/{control, rules, apache2.2-common.ufw.profile}: Add ufw profiles.   - debian/control: Add bzr tag and point it to our tree   - debain/apache2.py, debian/apache2.2-common.isntall: Add apport hook.   - debian/control, debian/ask-for-passphrase, debian/config-dir/mods-available/ssl.conf:     Plymouth aware passphrase dialog program ask-for-passphrase.	Chuck Short	2.2.16-6ubuntu1	13 years ago
63		[Clint Byrum] [Clint Byrum] * Adding plymouth aware passphrase dialog program ask-for-passphrase.   (LP: #582963)   + debian/control: apache2.2-common depends on bash for ask-for-passphrase   + debian/config-dir/mods-available/ssl.conf:     - SSLPassPhraseDialog now uses exec:/usr/share/apache2/ask-for-passhrase [Chuck Short] * Add apport hook. (LP: #609177)   + debian/apache2.py, debian/apache2.2-common.install	Chuck Short	2.2.16-4ubuntu2	13 years ago
62		* Merge from debian unstable. Remaining changes: * Merge from debian unstable.  Remaining changes:   - debian/{control, rules}: Enable PIE hardening.   - debian/{control, rules, apache2.2-common.ufw.profile}: Add ufw profiles.   - debian/control: Add bzr tag and point it to our tree	Chuck Short	2.2.16-4ubuntu1	13 years ago
61		* Merge from debian unstable. Remaining changes: * Merge from debian unstable.  Remaining changes:   - debian/{control, rules}: Enable PIE hardening.   - debian/{control, rules, apache2.2-common.ufw.profile}: Add ufw profiles.   - debian/control: Add bzr tag and point it to our tree.	Chuck Short	2.2.16-3ubuntu1	13 years ago
60		Revert "stty sane" to unbreak apache starting, this will hav... Revert "stty sane" to unbreak apache starting, this will have to be fixed a different way. (LP: #626723)	Chuck Short	2.2.16-1ubuntu3	13 years ago
59		debian/apache2.2-common.apache2.init: Add stty sane so that ... debian/apache2.2-common.apache2.init: Add stty sane so that users will get a  password prompt when using apache-ssl. (LP: #582963)	Chuck Short	2.2.16-1ubuntu2	13 years ago
58		* Merge from debian unstable. Remaining changes: * Merge from debian unstable.  Remaining changes:   - debian/{control, rules}: Enable PIE hardening.   - debian/{control, rules, apache2.2-common.ufw.profile}: Add ufw profiles.   - debian/control: Add bzr tag and point it to our tree.   - debian/apache2-2.common.apache2.init: Add graceful restart (LP: #456381)	Chuck Short	2.2.16-1ubuntu1	13 years ago
57		* Merge from debian unstable. Remaining changes: * Merge from debian unstable.  Remaining changes:   - debian/{control, rules}: Enable PIE hardening.   - debian/{control, rules, apache2.2-common.ufw.profile}: Add ufw profiles.   - debian/control: Add bzr tag and point it to our tree.   - debian/apache2-2.common.apache2.init: Add graceful restart (LP: #456381)   + Dropped:     - debian/patches/206-fix-potential-memory-leaks.dpatch: No longer needed.     - debian/patches/206-report-max-client-mpm-worker.dpatch: No longer needed.     - debian/config-dir/apache2.conf: Merged back from debian.     - mod-reqtimeout functionality: Merge back from debian.     - debian/patches/204_CVE-2010-0408.dpatch: No longer needed.     - debian/patches/205_CVE-2010-0434.dpatch: No longer needed.     - debian/patches/203_fix-ab-segfault.dpatch: No longer needed.	Chuck Short	2.2.15-5ubuntu1	13 years ago
56		debian/patches/210-backport-mod-reqtimeout-ftbfs.dpatch: Add... debian/patches/210-backport-mod-reqtimeout-ftbfs.dpatch: Add missing mod_reqtime.so (LP: #562370)	Chuck Short	2.2.14-5ubuntu8	14 years ago
55		Fix debian/rules Fix debian/rules	Chuck Short		14 years ago
54		Revert testsuite Revert testsuite	Chuck Short		14 years ago
53		Add apache testsuite: Add apache testsuite:	Chuck Short		14 years ago
52		* Merge from debian testing, remaining changes: * Merge from debian testing, remaining changes:   - debian/{control, rules}: Enable PIE hardening.   - debian/{control, rules, pache2.2-common.ufw.profile}: Add ufw profiles.   - debian/conrol: Add bzr tag and point it to our tree.   - removed debian/patches/203_fix_legacy_ap_rputs_segfaults.dpatch: it was     already dropped from 00list, so just remove the patch entirely	Jamie Strandboge	2.2.14-2ubuntu1	14 years ago
51		* Merge from debian testing, remaining changes: * Merge from debian testing, remaining changes:   - debian/{control, rules}: Enable PIE hardening.   - debian/{control, rules, pache2.2-common.ufw.profile}: Add ufw profiles.   - debian/conrol: Add bzr tag and point it to our tree.   - Dropped debian/patches/203_fix_legacy_ap_rputs_segfaults.dpatch:      Already applied upstream.	Chuck Short	2.2.14-1ubuntu1	14 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1