Advertisement
Guest User

Untitled

a guest
May 23rd, 2017
572
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 23.32 KB | None | 0 0
  1. * Wed Oct 15 2014 Johnny Hughes <johnny@centos.org> - 2.2.15-39.el6.centos
  2. - Roll in CentOS Branding
  3.  
  4. * Tue Aug 05 2014 Jan Kaluza <jkaluza@redhat.com> - 2.2.15-39
  5. - mod_proxy: close client connection if the backend closes connection (#1111410)
  6.  
  7. * Thu Jul 17 2014 Jan Kaluza <jkaluza@redhat.com> - 2.2.15-38
  8. - mod_cgid: add security fix for CVE-2014-0231
  9. - mod_deflate: add security fix for CVE-2014-0118
  10. - mod_status: add security fix for CVE-2014-0226
  11.  
  12. * Fri Jun 27 2014 Joe Orton <jorton@redhat.com> - 2.2.15-37
  13. - mod_ssl: fix SSLCipherSuite (#1035818)
  14.  
  15. * Mon Jun 23 2014 Jan Kaluza <jkaluza@redhat.com> - 2.2.15-36
  16. - mod_ssl: Add a wildcard common name match (#1035666)
  17. - mod_cache: avoid thundering herd (#1094990)
  18. - mod_cgi: return error code 408 on timeout (#979129)
  19.  
  20. * Mon Jun 23 2014 Jan Kaluza <jkaluza@redhat.com> - 2.2.15-35
  21. - mod_proxy_http: cleanup bucket brigade even on error (#991556)
  22. - add missing Reason-Phrase in HTTP response headers (#1032733)
  23. - mod_ldap: fix crash in uldap_cache_getattrvals (#1048757)
  24.  
  25. * Fri Jun 20 2014 Joe Orton <jorton@redhat.com> - 2.2.15-34
  26. - mod_ssl: prevent use of AECDH (#1035818)
  27.  
  28. * Fri Jun 20 2014 Joe Orton <jorton@redhat.com> - 2.2.15-33
  29. - mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#11 03115)
  30.  
  31. * Thu Jun 19 2014 Joe Orton <jorton@redhat.com> - 2.2.15-32
  32. - mod_ssl: adjust DH temp key selection, prefer larger and up to 8192-bit. (#107 1883)
  33.  
  34. * Tue Jun 10 2014 Jan Kaluza <jkaluza@redhat.com> - 2.2.15-31
  35. - mod_proxy: fix bybusyness algorithm to balance the load after failed worker
  36. has recovered (#972949)
  37. - mod_proxy: ignore EINTR when polling in proxy_connect (#976644)
  38. - mod_proxy_http: log "reading response" error to proper log file (#1012766)
  39. - mod_ssl: add ECDH support (#1035818)
  40. - mod_ssl: improve DH temp key handling (#1071883)
  41. - mod_ssl: enable support at run-time for TLSv1.x with newer OpenSSL (#1034984)
  42. - mod_ssl: fix crash when loaded for first time during the reload (#876626)
  43. - mod_ssl: make lazy CRL caching configurable (#1037832)
  44. - apachectl status: return exit code 3 when httpd is not running (#1077336)
  45.  
  46. * Thu Mar 20 2014 Jan Kaluza <jkaluza@redhat.com> - 2.2.15-30
  47. - mod_dav: add security fix for CVE-2013-6438 (#1078175)
  48. - mod_log_config: add security fix for CVE-2014-0098 (#1078175)
  49.  
  50. * Fri Aug 02 2013 Jan Kaluza <jkaluza@redhat.com> - 2.2.15-29
  51. - mod_dav: add security fix for CVE-2013-1896 (#991369)
  52.  
  53. * Mon Apr 29 2013 Joe Orton <jorton@redhat.com> - 2.2.15-28
  54. - mod_rewrite: add security fix for CVE-2013-1862 (#953729)
  55.  
  56. * Thu Mar 07 2013 <jorton@redhat.com> - 2.2.15-27
  57. - add security fixes for CVE-2012-3499, CVE-2012-4558 (#915883, #915884)
  58.  
  59. * Wed Dec 05 2012 Jan Kaluza <jkaluza@redhat.com> - 2.2.15-26
  60. - htcacheclean: exit with code 4 also for "restart" action (#805810)
  61.  
  62. * Mon Dec 03 2012 Jan Kaluza <jkaluza@redhat.com> - 2.2.15-25
  63. - htcacheclean: exit with code 4 if nonprivileged user runs initscript (#805810)
  64. - rotatelogs: omit the second arg when invoking a post-rotate program (#876923)
  65.  
  66. * Thu Nov 08 2012 Joe Orton <jorton@redhat.com> - 2.2.15-24
  67. - mod_ssl: improved patch for mod_nss fallback (w/mharmsen, #805720)
  68.  
  69. * Wed Nov 07 2012 Jan Kaluza <jkaluza@redhat.com> - 2.2.15-23
  70. - mod_log_config: fix cookie parsing substring mismatch (#867268)
  71.  
  72. * Mon Oct 22 2012 Jan Kaluza <jkaluza@redhat.com> - 2.2.15-22
  73. - mod_cache: fix header merging for 304 case, thanks to Roy Badami (#868283)
  74. - mod_cache: fix handling of 304 responses (#868253)
  75.  
  76. * Thu Oct 18 2012 Jan Kaluza <jkaluza@redhat.com> - 2.2.15-21
  77. - mod_proxy_ajp: ignore flushing if headers have not been sent (#853160)
  78. - mod_proxy_ajp: do not mark worker in error state when one request
  79. timeouts (#864317)
  80. - mod_ssl: do not run post script if all files are already created (#752618)
  81.  
  82. * Mon Oct 15 2012 Joe Orton <jorton@redhat.com> - 2.2.15-20
  83. - add htcacheclean init script (Jan Kaluza, #805810)
  84.  
  85. * Mon Sep 17 2012 Joe Orton <jorton@redhat.com> - 2.2.15-19
  86. - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy
  87. is not configured. (#805720)
  88.  
  89. * Wed Sep 05 2012 Joe Orton <jorton@redhat.com> - 2.2.15-18
  90. - add security fix for CVE-2012-2687 (#850794)
  91.  
  92. * Mon Sep 03 2012 Jan Kaluza <jkaluza@redhat.com> - 2.2.15-17
  93. - mod_proxy: allow change BalancerMember state in web interface (#748400)
  94. - mod_proxy: Tone down "worker [URL] used by another worker" warning (#787247)
  95. - mod_proxy: add support for "failonstatus" option (#824571)
  96. - mod_proxy: avoid DNS lookup on hostname from request URI if
  97. ProxyRemote* is configured (#837086)
  98. - rotatelogs: create files even if they are empty (#757739)
  99. - rotatelogs: option to rotate files into a custom location (#757735)
  100. - rotatelogs: add support for -L option (#838493)
  101. - fix handling of long chunk-line (#842376)
  102. - add server aliases to "httpd -S" output (#833092)
  103. - omit %posttrans daemon restart if
  104. /etc/sysconfig/httpd-disable-posttrans exists (#833064)
  105. - mod_ldap: treat LDAP_UNAVAILABLE as a transient error (#829689)
  106. - ab: fix double free when SSL request fails in verbose mode (#837613)
  107. - mod_cache: do not cache partial results (#822587)
  108. - mod_ldap: add LDAPReferrals directive alias (#796958)
  109. - mod_ssl: add _userID DN variable suffix for NID_userId (#842375)
  110. - mod_ssl: fix test for missing decrypted private keys, and ensure that
  111. the keypair matches (#848954)
  112. - mod_authnz_ldap: set AUTHORIZE_* variables in LDAP authorization (#828896)
  113. - relax checks for status-line validity (#853348)
  114.  
  115. * Mon Feb 06 2012 Joe Orton <jorton@redhat.com> - 2.2.15-16
  116. - add security fixes for CVE-2011-4317, CVE-2012-0053, CVE-2012-0031,
  117. CVE-2011-3607 (#787599)
  118. - obviates fix for CVE-2011-3638, patch removed
  119.  
  120. * Thu Oct 06 2011 Joe Orton <jorton@redhat.com> - 2.2.15-15
  121. - mod_proxy_ftp: fix handling of EPSV w/IPv6 localhost (#737960)
  122. - core: add security fix for CVE-2011-3368 (#743659)
  123. - mod_proxy_ajp: add security fix for CVE-2011-3348 (#738961)
  124. - mod_cache: forward-port CacheMaxExpire "hard" option (#740242)
  125.  
  126. * Wed Sep 28 2011 Joe Orton <jorton@redhat.com> - 2.2.15-14
  127. - update to byterange patch (#736592)
  128.  
  129. * Thu Sep 08 2011 Joe Orton <jorton@redhat.com> - 2.2.15-13
  130. - add security fix for CVE-2011-3192 (#733063, #736592)
  131.  
  132. * Mon Aug 08 2011 Joe Orton <jorton@redhat.com> - 2.2.15-12
  133. - mod_ssl: ignore SNI hints unless required by config (#714704)
  134. - mod_ssl: fix segfault with bad SSLCryptoDevice argument (#729585)
  135.  
  136. * Tue Jul 26 2011 Joe Orton <jorton@redhat.com> - 2.2.15-11
  137. - rebase mod_reqtimeout to 2.2.17 (#676634)
  138. - mod_proxy_ajp: honour ProxyErrorOverride (#694939)
  139. - mod_ssl: add fix for handling incomplete lines w/revproxy (#700074)
  140. - mod_filter: fix matching against non-std response headers (#700075)
  141. - core: abort() on malloc() failure (#700393)
  142. - mod_ssl: fix startup crash w/client cert shared across vhosts (#720980)
  143.  
  144. * Tue Jun 07 2011 Joe Orton <jorton@redhat.com> - 2.2.15-10
  145. - mod_filter: fix test against non-standard response headers (#700075)
  146.  
  147. * Fri Apr 08 2011 Joe Orton <jorton@redhat.com> - 2.2.15-9
  148. - mod_ssl: complete fix for overlapping memcpy (#652335)
  149.  
  150. * Mon Mar 21 2011 Joe Orton <jorton@redhat.com> - 2.2.15-8
  151. - mod_ssl: fix compat with FIPS-enabled OpenSSL (#684144)
  152.  
  153. * Thu Feb 24 2011 Joe Orton <jorton@redhat.com> - 2.2.15-7
  154. - mod_ldap: fix caching with per-vhost directive use (#676635)
  155. - mod_ssl: fix startup with duplicate SSL vhost configurations (#676831)
  156. - prefork: ensure early child exit during graceful restart (#679476)
  157.  
  158. * Mon Jan 31 2011 Joe Orton <jorton@redhat.com> - 2.2.15-6
  159. - ab: fail gracefully for OOM allocating stats structures (#645846)
  160. - init script: use $STOP_DELAY as delay before SIGKILL of parent (#657480)
  161. - stop multiple invocations of filter init functions (#631849)
  162. - mod_ssl: avoid overlapping memcpy (#652335)
  163. - mark httpd.conf as noreplace
  164.  
  165. * Fri Aug 13 2010 Joe Orton <jorton@redhat.com> - 2.2.15-5
  166. - add security fix for CVE-2010-1452 (#618193)
  167.  
  168. * Wed Jun 23 2010 Joe Orton <jorton@redhat.com> - 2.2.15-4
  169. - use init script to rotate logs (#606955)
  170. - disable keepalive for 100-continue and error response (#606964)
  171.  
  172. * Tue May 25 2010 Joe Orton <jorton@redhat.com> - 2.2.15-3
  173. - add "Satisfy All" for .htaccess in httpd.conf (#594981)
  174. - adjust user/group creation in %pre (#594395)
  175. - mod_ssl: tweak OID() evaluation of unknown exts (#594980)
  176.  
  177. * Thu May 06 2010 Joe Orton <jorton@redhat.com> - 2.2.15-2
  178. - init script fixes for LSB compliance (#546252)
  179. * exit code 2 for an unknown script argument
  180. * exit code 6 for a reload if config-test fails
  181. * exit code 7 for a reload on a stopped service
  182. * fixed help output to cover all options
  183. - mod_dav: handle PUT failure more cleanly (#572911)
  184.  
  185. * Thu Mar 11 2010 Joe Orton <jorton@redhat.com> - 2.2.15-1
  186. - update to 2.2.15 (#570465, #570442)
  187. - fix version string (#572140)
  188. - mod_ssl: use ASN1_STRING_print() in SSLRequire's OID() (#552942)
  189. - prevent use of rsync during "make install" (#557049)
  190. - load mod_version by default in httpd.conf
  191.  
  192. * Tue Feb 09 2010 Joe Orton <jorton@redhat.com> - 2.2.14-5
  193. - mod_ssl: fix CVE-2009-3555 backport (#563119)
  194. - mod_authnz_ldap: fix for dynamic group support
  195. - mod_ssl: add SSLInsecureRenegotiation directive (#561435)
  196.  
  197. * Thu Jan 14 2010 Joe Orton <jorton@redhat.com> - 2.2.14-4
  198. - mod_ssl: add further mitigation for CVE-2009-3555
  199. - drop proxy_ajp.conf
  200. - update httpd.conf: decrease Timeout to 1m, update LoadModule
  201. directives, bump worker to 4 proc/300clients
  202. - fix hard-coded default pidfile to match default config (#547629)
  203. - drop legacy X-Pad header from short responses (#526110)
  204. - disable keepalive for Expect: 100-continue and error response (#533407)
  205. - mod_ext_filter: fix spurious error log output (#479463)
  206. - mod_rewrite: don't serialize logfile access (#493023)
  207. - fix spurious error messages on graceful restart (#233955)
  208. - mod_ssl: fix potential hang in renegotiation (#510515)
  209. - mod_proxy_connect: support use SSL client connection (#523594)
  210.  
  211. * Wed Dec 09 2009 Joe Orton <jorton@redhat.com> - 2.2.14-3
  212. - add 'ServerTokens Full-Release' config option (#477006)
  213.  
  214. * Tue Dec 08 2009 Joe Orton <jorton@redhat.com> - 2.2.14-2
  215. - drop distcache support
  216.  
  217. * Thu Dec 03 2009 Joe Orton <jorton@redhat.com> - 2.2.14-1
  218. - update to 2.2.14
  219. - relax permissions on /var/run/httpd (#495780)
  220. - Requires(pre): httpd in mod_ssl subpackage (#543275)
  221. - add partial security fix for CVE-2009-3555 (#533125)
  222.  
  223. * Tue Sep 08 2009 Joe Orton <jorton@redhat.com> 2.2.13-2
  224. - restart service in posttrans (#491567)
  225.  
  226. * Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 2.2.13-2
  227. - rebuilt with new openssl
  228.  
  229. * Tue Aug 18 2009 Joe Orton <jorton@redhat.com> 2.2.13-1
  230. - update to 2.2.13
  231.  
  232. * Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.11-10
  233. - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
  234.  
  235. * Tue Jun 16 2009 Joe Orton <jorton@redhat.com> 2.2.11-9
  236. - build -manual as noarch
  237.  
  238. * Tue Mar 17 2009 Joe Orton <jorton@redhat.com> 2.2.11-8
  239. - fix pidfile in httpd.logrotate (thanks to Rainer Traut)
  240. - don't build mod_mem_cache or mod_file_cache
  241.  
  242. * Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.11-7
  243. - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
  244.  
  245. * Thu Jan 22 2009 Joe Orton <jorton@redhat.com> 2.2.11-6
  246. - Require: apr-util-ldap (#471898)
  247. - init script changes: pass pidfile to status(), use status() in
  248. condrestart (#480602), support try-restart as alias for
  249. condrestart
  250. - change /etc/httpd/run symlink to have destination /var/run/httpd,
  251. and restore "run/httpd.conf" as default PidFile (#478688)
  252.  
  253. * Fri Jan 16 2009 Tomas Mraz <tmraz@redhat.com> 2.2.11-5
  254. - rebuild with new openssl
  255.  
  256. * Sat Dec 27 2008 Robert Scheck <robert@fedoraproject.org> 2.2.11-4
  257. - Made default configuration using /var/run/httpd for pid file
  258.  
  259. * Thu Dec 18 2008 Joe Orton <jorton@redhat.com> 2.2.11-3
  260. - update to 2.2.11
  261. - package new /var/run/httpd directory, and move default pidfile
  262. location inside there
  263.  
  264. * Tue Oct 21 2008 Joe Orton <jorton@redhat.com> 2.2.10-2
  265. - update to 2.2.10
  266.  
  267. * Tue Jul 15 2008 Joe Orton <jorton@redhat.com> 2.2.9-5
  268. - move AddTypes for SSL cert/CRL types from ssl.conf to httpd.conf (#449979)
  269.  
  270. * Mon Jul 14 2008 Joe Orton <jorton@redhat.com> 2.2.9-4
  271. - use Charset=UTF-8 in default httpd.conf (#455123)
  272. - only enable suexec when appropriate (Jim Radford, #453697)
  273.  
  274. * Thu Jul 10 2008 Tom "spot" Callaway <tcallawa@redhat.com> 2.2.9-3
  275. - rebuild against new db4 4.7
  276.  
  277. * Tue Jul 08 2008 Joe Orton <jorton@redhat.com> 2.2.9-2
  278. - update to 2.2.9
  279. - build event MPM too
  280.  
  281. * Wed Jun 04 2008 Joe Orton <jorton@redhat.com> 2.2.8-4
  282. - correct UserDir directive in default config (#449815)
  283.  
  284. * Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 2.2.8 -3
  285. - Autorebuild for GCC 4.3
  286.  
  287. * Tue Jan 22 2008 Joe Orton <jorton@redhat.com> 2.2.8-2
  288. - update to 2.2.8
  289. - drop mod_imagemap
  290.  
  291. * Wed Dec 05 2007 Release Engineering <rel-eng at fedoraproject dot org> - 2.2.6 -4
  292. - Rebuild for openssl bump
  293.  
  294. * Mon Sep 17 2007 Joe Orton <jorton@redhat.com> 2.2.6-3
  295. - add fix for SSL library string regression (PR 43334)
  296. - use powered-by logo from system-logos (#250676)
  297. - preserve timestamps for installed config files
  298.  
  299. * Fri Sep 07 2007 Joe Orton <jorton@redhat.com> 2.2.6-2
  300. - update to 2.2.6 (#250757, #282761)
  301.  
  302. * Sun Sep 02 2007 Joe Orton <jorton@redhat.com> 2.2.4-10
  303. - rebuild for fixed APR
  304.  
  305. * Wed Aug 22 2007 Joe Orton <jorton@redhat.com> 2.2.4-9
  306. - rebuild for expat soname bump
  307.  
  308. * Tue Aug 21 2007 Joe Orton <jorton@redhat.com> 2.2.4-8
  309. - fix License
  310. - require /etc/mime.types (#249223)
  311.  
  312. * Thu Jul 26 2007 Joe Orton <jorton@redhat.com> 2.2.4-7
  313. - drop -tools dependency on httpd (thanks to Matthias Saou)
  314.  
  315. * Wed Jul 25 2007 Joe Orton <jorton@redhat.com> 2.2.4-6
  316. - split out utilities into -tools subpackage, based on patch
  317. by Jason Tibbs (#238257)
  318.  
  319. * Tue Jul 24 2007 Joe Orton <jorton@redhat.com> 2.2.4-5
  320. - spec file cleanups: provide httpd-suexec, mod_dav;
  321. don't obsolete mod_jk; drop trailing dots from Summaries
  322. - init script
  323. * add LSB info header, support force-reload (#246944)
  324. * update description
  325. * drop 1.3 config check
  326. * pass $pidfile to daemon and pidfile everywhere
  327.  
  328. * Wed May 09 2007 Joe Orton <jorton@redhat.com> 2.2.4-4
  329. - update welcome page branding
  330.  
  331. * Tue Apr 03 2007 Joe Orton <jorton@redhat.com> 2.2.4-3
  332. - drop old triggers, old Requires, xmlto BR
  333. - use Requires(...) correctly
  334. - use standard BuildRoot
  335. - don't mark init script as config file
  336. - trim CHANGES further
  337.  
  338. * Mon Mar 12 2007 Joe Orton <jorton@redhat.com> 2.2.4-2
  339. - update to 2.2.4
  340. - drop the migration guide (#223605)
  341.  
  342. * Thu Dec 07 2006 Joe Orton <jorton@redhat.com> 2.2.3-8
  343. - fix path to instdso.sh in special.mk (#217677)
  344. - fix detection of links in "apachectl fullstatus"
  345.  
  346. * Tue Dec 05 2006 Joe Orton <jorton@redhat.com> 2.2.3-7
  347. - rebuild for libpq soname bump
  348.  
  349. * Sat Nov 11 2006 Joe Orton <jorton@redhat.com> 2.2.3-6
  350. - rebuild for BDB soname bump
  351.  
  352. * Mon Sep 11 2006 Joe Orton <jorton@redhat.com> 2.2.3-5
  353. - updated "powered by Fedora" logo (#205573, Diana Fong)
  354. - tweak welcome page wording slightly (#205880)
  355.  
  356. * Fri Aug 18 2006 Jesse Keating <jkeating@redhat.com> - 2.2.3-4
  357. - rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc*
  358. (#203001)
  359.  
  360. * Thu Aug 03 2006 Joe Orton <jorton@redhat.com> 2.2.3-3
  361. - init: use killproc() delay to avoid race killing parent
  362.  
  363. * Fri Jul 28 2006 Joe Orton <jorton@redhat.com> 2.2.3-2
  364. - update to 2.2.3
  365. - trim %changelog to >=2.0.52
  366.  
  367. * Thu Jul 20 2006 Joe Orton <jorton@redhat.com> 2.2.2-8
  368. - fix segfault on dummy connection failure at graceful restart (#199429)
  369.  
  370. * Wed Jul 19 2006 Joe Orton <jorton@redhat.com> 2.2.2-7
  371. - fix "apxs -g"-generated Makefile
  372. - fix buildconf with autoconf 2.60
  373.  
  374. * Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 2.2.2-5.1
  375. - rebuild
  376.  
  377. * Wed Jun 07 2006 Joe Orton <jorton@redhat.com> 2.2.2-5
  378. - require pkgconfig for -devel (#194152)
  379. - fixes for installed support makefiles (special.mk et al)
  380. - BR autoconf
  381.  
  382. * Fri Jun 02 2006 Joe Orton <jorton@redhat.com> 2.2.2-4
  383. - make -devel package multilib-safe (#192686)
  384.  
  385. * Thu May 11 2006 Joe Orton <jorton@redhat.com> 2.2.2-3
  386. - build DSOs using -z relro linker flag
  387.  
  388. * Wed May 03 2006 Joe Orton <jorton@redhat.com> 2.2.2-2
  389. - update to 2.2.2
  390.  
  391. * Thu Apr 06 2006 Joe Orton <jorton@redhat.com> 2.2.0-6
  392. - rebuild to pick up apr-util LDAP interface fix (#188073)
  393.  
  394. * Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - (none):2.2.0-5.1.2
  395. - bump again for double-long bug on ppc(64)
  396.  
  397. * Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - (none):2.2.0-5.1.1
  398. - rebuilt for new gcc4.1 snapshot and glibc changes
  399.  
  400. * Mon Feb 06 2006 Joe Orton <jorton@redhat.com> 2.2.0-5.1
  401. - mod_auth_basic/mod_authn_file: if no provider is configured,
  402. and AuthUserFile is not configured, decline to handle authn
  403. silently rather than failing noisily.
  404.  
  405. * Fri Feb 03 2006 Joe Orton <jorton@redhat.com> 2.2.0-5
  406. - mod_ssl: add security fix for CVE-2005-3357 (#177914)
  407. - mod_imagemap: add security fix for CVE-2005-3352 (#177913)
  408. - add fix for AP_INIT_* designated initializers with C++ compilers
  409. - httpd.conf: enable HTMLTable in default IndexOptions
  410. - httpd.conf: add more "redirect-carefully" matches for DAV clients
  411.  
  412. * Thu Jan 05 2006 Joe Orton <jorton@redhat.com> 2.2.0-4
  413. - mod_proxy_ajp: fix Cookie handling (Mladen Turk, r358769)
  414.  
  415. * Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
  416. - rebuilt
  417.  
  418. * Wed Dec 07 2005 Joe Orton <jorton@redhat.com> 2.2.0-3
  419. - strip manual to just English content
  420.  
  421. * Mon Dec 05 2005 Joe Orton <jorton@redhat.com> 2.2.0-2
  422. - don't strip C-L from HEAD responses (Greg Ames, #110552)
  423. - load mod_proxy_balancer by default
  424. - add proxy_ajp.conf to load/configure mod_proxy_ajp
  425. - Obsolete mod_jk
  426. - update docs URLs in httpd.conf/ssl.conf
  427.  
  428. * Fri Dec 02 2005 Joe Orton <jorton@redhat.com> 2.2.0-1
  429. - update to 2.2.0
  430.  
  431. * Wed Nov 30 2005 Joe Orton <jorton@redhat.com> 2.1.10-2
  432. - enable mod_authn_alias, mod_authn_anon
  433. - update default httpd.conf
  434.  
  435. * Fri Nov 25 2005 Joe Orton <jorton@redhat.com> 2.1.10-1
  436. - update to 2.1.10
  437. - require apr >= 1.2.0, apr-util >= 1.2.0
  438.  
  439. * Wed Nov 09 2005 Tomas Mraz <tmraz@redhat.com> 2.0.54-16
  440. - rebuilt against new openssl
  441.  
  442. * Thu Nov 03 2005 Joe Orton <jorton@redhat.com> 2.0.54-15
  443. - log notice giving SELinux context at startup if enabled
  444. - drop SSLv2 and restrict default cipher suite in default
  445. SSL configuration
  446.  
  447. * Thu Oct 20 2005 Joe Orton <jorton@redhat.com> 2.0.54-14
  448. - mod_ssl: add security fix for SSLVerifyClient (CVE-2005-2700)
  449. - add security fix for byterange filter DoS (CVE-2005-2728)
  450. - add security fix for C-L vs T-E handling (CVE-2005-2088)
  451. - mod_ssl: add security fix for CRL overflow (CVE-2005-1268)
  452. - mod_ldap/mod_auth_ldap: add fixes from 2.0.x branch (upstream #34209 etc)
  453. - add fix for dummy connection handling (#167425)
  454. - mod_auth_digest: fix hostinfo comparison in CONNECT requests
  455. - mod_include: fix variable corruption in nested includes (upstream #12655)
  456. - mod_ssl: add fix for handling non-blocking reads
  457. - mod_ssl: fix to enable output buffering (upstream #35279)
  458. - mod_ssl: buffer request bodies for per-location renegotiation (upstream #12355 )
  459.  
  460. * Sat Aug 13 2005 Joe Orton <jorton@redhat.com> 2.0.54-13
  461. - don't load by default: mod_cern_meta, mod_asis
  462. - do load by default: mod_ext_filter (#165893)
  463.  
  464. * Thu Jul 28 2005 Joe Orton <jorton@redhat.com> 2.0.54-12
  465. - drop broken epoch deps
  466.  
  467. * Thu Jun 30 2005 Joe Orton <jorton@redhat.com> 2.0.54-11
  468. - mod_dav_fs: fix uninitialized variable (#162144)
  469. - add epoch to dependencies as appropriate
  470. - mod_ssl: drop dependencies on dev, make
  471. - mod_ssl: mark post script dependencies as such
  472.  
  473. * Mon May 23 2005 Joe Orton <jorton@redhat.com> 2.0.54-10
  474. - remove broken symlink (Robert Scheck, #158404)
  475.  
  476. * Wed May 18 2005 Joe Orton <jorton@redhat.com> 2.0.54-9
  477. - add piped logger fixes (w/Jeff Trawick)
  478.  
  479. * Mon May 09 2005 Joe Orton <jorton@redhat.com> 2.0.54-8
  480. - drop old "powered by Red Hat" logos
  481.  
  482. * Wed May 04 2005 Joe Orton <jorton@redhat.com> 2.0.54-7
  483. - mod_userdir: fix memory allocation issue (upstream #34588)
  484. - mod_ldap: fix memory corruption issue (Brad Nicholes, upstream #34618)
  485.  
  486. * Tue Apr 26 2005 Joe Orton <jorton@redhat.com> 2.0.54-6
  487. - fix key/cert locations in post script
  488.  
  489. * Mon Apr 25 2005 Joe Orton <jorton@redhat.com> 2.0.54-5
  490. - create default dummy cert in /etc/pki/tls
  491. - use a pseudo-random serial number on the dummy cert
  492. - change default ssl.conf to point at /etc/pki/tls
  493. - merge back -suexec subpackage; SELinux policy can now be
  494. used to persistently disable suexec (#155716)
  495. - drop /etc/httpd/conf/ssl.* directories and Makefiles
  496. - unconditionally enable PIE support
  497. - mod_ssl: fix for picking up -shutdown options (upstream #34452)
  498.  
  499. * Mon Apr 18 2005 Joe Orton <jorton@redhat.com> 2.0.54-4
  500. - replace PreReq with Requires(pre)
  501.  
  502. * Mon Apr 18 2005 Joe Orton <jorton@redhat.com> 2.0.54-3
  503. - update to 2.0.54
  504.  
  505. * Tue Mar 29 2005 Joe Orton <jorton@redhat.com> 2.0.53-6
  506. - update default httpd.conf:
  507. * clarify the comments on AddDefaultCharset usage (#135821)
  508. * remove all the AddCharset default extensions
  509. * don't load mod_imap by default
  510. * synch with upstream 2.0.53 httpd-std.conf
  511. - mod_ssl: set user from SSLUserName in access hook (upstream #31418)
  512. - htdigest: fix permissions of created files (upstream #33765)
  513. - remove htsslpass
  514.  
  515. * Wed Mar 02 2005 Joe Orton <jorton@redhat.com> 2.0.53-5
  516. - apachectl: restore use of $OPTIONS again
  517.  
  518. * Wed Feb 09 2005 Joe Orton <jorton@redhat.com> 2.0.53-4
  519. - update to 2.0.53
  520. - move prefork/worker modules comparison to %check
  521.  
  522. * Mon Feb 07 2005 Joe Orton <jorton@redhat.com> 2.0.52-7
  523. - fix cosmetic issues in "service httpd reload"
  524. - move User/Group higher in httpd.conf (#146793)
  525. - load mod_logio by default in httpd.conf
  526. - apachectl: update for correct libselinux tools locations
  527.  
  528. * Tue Nov 16 2004 Joe Orton <jorton@redhat.com> 2.0.52-6
  529. - add security fix for CVE CAN-2004-0942 (memory consumption DoS)
  530. - SELinux: run httpd -t under runcon in configtest (Steven Smalley)
  531. - fix SSLSessionCache comment for distcache in ssl.conf
  532. - restart using SIGHUP not SIGUSR1 after logrotate
  533. - add ap_save_brigade fix (upstream #31247)
  534. - mod_ssl: fix possible segfault in auth hook (upstream #31848)
  535. - add htsslpass(1) and configure as default SSLPassPhraseDialog (#128677)
  536. - apachectl: restore use of $OPTIONS
  537. - apachectl, httpd.init: refuse to restart if $HTTPD -t fails
  538. - apachectl: run $HTTPD -t in user SELinux context for configtest
  539. - update for pcre-5.0 header locations
  540.  
  541. * Sat Nov 13 2004 Jeff Johnson <jbj@redhat.com> 2.0.52-5
  542. - rebuild against db-4.3.21 aware apr-util.
  543.  
  544. * Thu Nov 11 2004 Jeff Johnson <jbj@jbj.org> 2.0.52-4
  545. - rebuild against db-4.3-21.
  546.  
  547. * Tue Sep 28 2004 Joe Orton <jorton@redhat.com> 2.0.52-3
  548. - add dummy connection address fixes from HEAD
  549. - mod_ssl: add security fix for CAN-2004-0885
  550.  
  551. * Tue Sep 28 2004 Joe Orton <jorton@redhat.com> 2.0.52-2
  552. - update to 2.0.52
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement