94c97faa9a
- allow only TCP ports in Yast2 firewall files
...
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=408
2014-09-29 08:30:32 +00:00
163b7694ca
Accepting request 252743 from home:lnussel:branches:Apache
...
- move most ssl options to ssl-global.conf. There is usually no need
for every vhost to re-define the ciphers for example (bnc#865582).
Drop some commented entries that only lead to confusion.
OBS-URL: https://build.opensuse.org/request/show/252743
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=407
2014-09-29 08:10:08 +00:00
4b31aea044
Accepting request 252506 from home:pgajdos
...
- more 2.2 -> 2.4 [bnc#862058]
OBS-URL: https://build.opensuse.org/request/show/252506
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=406
2014-09-26 15:16:44 +00:00
e897f2962b
Accepting request 252298 from home:pgajdos
...
- ServerSignature=Off and ServerTokens=Prod by request from
security team [bnc#716495]
- fix documentation links 2.2 -> 2.4 [bnc#888163] (internal)
OBS-URL: https://build.opensuse.org/request/show/252298
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=405
2014-09-25 15:29:49 +00:00
Cristian Rodríguez
b0906927d0
Accepting request 241778 from home:elvigia:branches:Apache
...
- Update package Summary and Description.
- version 2.4.10
* SECURITY: CVE-2014-0117 (cve.mitre.org)
* SECURITY: CVE-2014-3523 (cve.mitre.org)
* SECURITY: CVE-2014-0226 (cve.mitre.org)
* SECURITY: CVE-2014-0118 (cve.mitre.org)
* SECURITY: CVE-2014-0231 (cve.mitre.org)
* Multiple bugfixes to mod_ssl, mod_cache, mod_deflate, mod_lua
* mod_proxy_fcgi supports unix sockets.
OBS-URL: https://build.opensuse.org/request/show/241778
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=404
2014-07-23 20:22:18 +00:00
Roman Drahtmueller
d7aec51e00
Accepting request 241685 from home:mcalmer:branches:Apache
...
- provide httpd.service as alias for apache2.service for
compatibility reasons (bnc#888093)
OBS-URL: https://build.opensuse.org/request/show/241685
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=403
2014-07-21 10:12:28 +00:00
Stephan Kulow
636f6b91e8
Accepting request 227797 from Apache
...
- version 2.4.9
* SECURITY: CVE-2014-0098
* SECURITY: CVE-2013-6438
* multiple bugfixes and improvements to mod_ssl, mod_lua,
mod_session and core, see CHANGES for details. (forwarded request 227796 from elvigia)
OBS-URL: https://build.opensuse.org/request/show/227797
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=82
2014-03-31 18:43:06 +00:00
Cristian Rodríguez
19a944dee7
Accepting request 227796 from home:elvigia:branches:Apache
...
- version 2.4.9
* SECURITY: CVE-2014-0098
* SECURITY: CVE-2013-6438
* multiple bugfixes and improvements to mod_ssl, mod_lua,
mod_session and core, see CHANGES for details.
OBS-URL: https://build.opensuse.org/request/show/227796
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=402
2014-03-27 16:21:35 +00:00
Stephan Kulow
46cb55e7e7
Accepting request 223761 from Apache
...
Automatic submission by obs-autosubmit
OBS-URL: https://build.opensuse.org/request/show/223761
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=81
2014-02-26 22:20:22 +00:00
Roman Drahtmueller
c5bb63f9e2
- /etc/sysconfig/apache2: add socache_shmcb to the list of modules
...
that are enabled.
/etc/apache2/ssl-global.conf: make SSLSessionCache shmcb...
conditional on IfModule socache_shmcb.
The same applies to SSLSessionCache dmb:* via module socache_dbm
in commented section of same file. [bnc#864185]
- /etc/sysconfig/apache2: remove reference to non-existing script
/usr/share/doc/packages/apache2/certificate.sh, which was only a
wrapper to mkcert.sh anyways. [bnc#864185]
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=401
2014-02-17 17:32:05 +00:00
Stephan Kulow
82775e4df7
Accepting request 221932 from Apache
...
Correct apache2.changes, mention the drop of httpd-event-ssl.patch (forwarded request 214772 from aeneas_jaissle)
OBS-URL: https://build.opensuse.org/request/show/221932
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=80
2014-02-13 05:53:02 +00:00
Peter Poeml
c00cf22114
Accepting request 214772 from home:aeneas_jaissle:branches:Apache
...
Correct apache2.changes, mention the drop of httpd-event-ssl.patch
OBS-URL: https://build.opensuse.org/request/show/214772
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=400
2014-02-11 23:36:16 +00:00
Cristian Rodríguez
74d7ddb780
Accepting request 208347 from home:elvigia:branches:Apache
...
- update to apache 2.4.7, important changes:
* This release requires both apr and apr-util 1.5.x series
and therefore will no longer build in older released products
* mod_ssl: Improve handling of ephemeral DH and ECDH keys
(obsoletes httpd-mod_ssl_ephemeralkeyhandling.patch)
* event MPM: Fix possible crashes
* mod_deflate: Improve error detection
* core: Add open_htaccess hook in conjunction with dirwalk_stat.
* mod_rewrite: Make rewrite websocket-aware to allow proxying.
* mod_ssl: drop support for export-grade ciphers with ephemeral RSA
keys, and unconditionally disable aNULL, eNULL and EXP ciphers
(not overridable via SSLCipherSuite)
* see CHANGES for more details
OBS-URL: https://build.opensuse.org/request/show/208347
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=399
2013-11-25 22:26:02 +00:00
Stephan Kulow
728994a45b
Accepting request 207096 from Apache
...
- httpd-mod_ssl_ephemeralkeyhandling.patch obsoletes
mod_ssl-2.4.x-ekh.diff this new patch is the final
form of the rework, merged for 2.4.7. (forwarded request 207095 from elvigia)
OBS-URL: https://build.opensuse.org/request/show/207096
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=79
2013-11-17 14:58:00 +00:00
Cristian Rodríguez
8ac24cac75
Accepting request 207095 from home:elvigia:branches:Apache
...
- httpd-mod_ssl_ephemeralkeyhandling.patch obsoletes
mod_ssl-2.4.x-ekh.diff this new patch is the final
form of the rework, merged for 2.4.7.
OBS-URL: https://build.opensuse.org/request/show/207095
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=398
2013-11-16 01:22:18 +00:00
Stephan Kulow
14dc2e30ef
Accepting request 206490 from Apache
...
Removed obsolete directive DefaultType bnc#848146
Changed access control to use new Require type directives (forwarded request 205788 from fdekruijf)
OBS-URL: https://build.opensuse.org/request/show/206490
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=78
2013-11-12 08:49:40 +00:00
Tomáš Chvátal
738fecb393
Accepting request 205788 from home:fdekruijf:branches:Apache
...
Removed obsolete directive DefaultType bnc#848146
Changed access control to use new Require type directives
OBS-URL: https://build.opensuse.org/request/show/205788
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=397
2013-11-11 14:10:25 +00:00
Stephan Kulow
c9dbb8f526
Accepting request 205826 from Apache
...
Automatic submission by obs-autosubmit
OBS-URL: https://build.opensuse.org/request/show/205826
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=77
2013-11-07 07:33:45 +00:00
Cristian Rodríguez
4c27b7a385
Accepting request 204767 from home:elvigia:branches:Apache
...
- reenable mod_ssl-2.4.x-ekh.diff
OBS-URL: https://build.opensuse.org/request/show/204767
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=396
2013-10-25 00:06:51 +00:00
Tomáš Chvátal
2f1250d6e7
Accepting request 204343 from Apache
...
- Correct build in old distros.
- disable (revert) mod_ssl changes in the previous
commit so it does not end in factory or 13.1 yet.
- make mod_systemd static so scenarios described in
[bnc#846897] do not happen again. (forwarded request 204342 from elvigia)
OBS-URL: https://build.opensuse.org/request/show/204343
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=76
2013-10-24 12:07:25 +00:00
Cristian Rodríguez
028198afb4
Accepting request 204342 from home:elvigia:branches:Apache
...
- Correct build in old distros.
- disable (revert) mod_ssl changes in the previous
commit so it does not end in factory or 13.1 yet.
- make mod_systemd static so scenarios described in
[bnc#846897] do not happen again.
OBS-URL: https://build.opensuse.org/request/show/204342
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=395
2013-10-22 15:46:52 +00:00
Cristian Rodríguez
4380c6bdd7
Accepting request 204244 from home:elvigia:branches:Apache
...
- mod_ssl: improve ephemeral key handling in particular, support DH params
with more than 1024 bits, and allow custom configuration.
This patch adjust DH parameters according to the relevant RFC
recommendations and permanently disables the usage of "export"
and "NULL" ciphers no matter what the user configuration is
(mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)
OBS-URL: https://build.opensuse.org/request/show/204244
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=394
2013-10-21 23:51:12 +00:00
Cristian Rodríguez
a7e48a73f8
Accepting request 204242 from home:elvigia:branches:Apache
...
- fix [bnc#846897] problems building kiwi images due to
systemd not being running in chroot. (submit to 13.1 ASAP)
OBS-URL: https://build.opensuse.org/request/show/204242
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=393
2013-10-21 23:38:35 +00:00
Tomáš Chvátal
e8f10eace8
Accepting request 203415 from Apache
...
Fix SUSE spelling. (forwarded request 203323 from a_jaeger)
OBS-URL: https://build.opensuse.org/request/show/203415
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=75
2013-10-17 11:57:41 +00:00
093d4afe6d
Accepting request 203323 from home:a_jaeger:FactoryFix
...
Fix SUSE spelling.
OBS-URL: https://build.opensuse.org/request/show/203323
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=392
2013-10-15 15:43:17 +00:00
Stephan Kulow
501f418667
Accepting request 197316 from Apache
...
- Also fix subtle non-obvious systemd unit confusion
we really mean -DFOREGROUND not -DNO_DETACH the latter only
inhibits the parent from forking, not quite the same as
running in well.. the foreground as required. (forwarded request 197315 from elvigia)
OBS-URL: https://build.opensuse.org/request/show/197316
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=73
2013-09-04 11:16:53 +00:00
Cristian Rodríguez
1d6ce77ab3
Accepting request 197315 from home:elvigia:branches:Apache
...
- Also fix subtle non-obvious systemd unit confusion
we really mean -DFOREGROUND not -DNO_DETACH the latter only
inhibits the parent from forking, not quite the same as
running in well.. the foreground as required.
OBS-URL: https://build.opensuse.org/request/show/197315
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=391
2013-09-03 15:41:55 +00:00
Cristian Rodríguez
888fcaf9d4
Accepting request 197199 from home:elvigia:branches:Apache
...
- Ensure we only use /run and not /var/run
OBS-URL: https://build.opensuse.org/request/show/197199
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=390
2013-09-03 04:07:30 +00:00
Stephan Kulow
0fa6097d06
Accepting request 196848 from Apache
...
- Really use %requires_ge for libapr1 and libapr-util1
mentioned but not implemented in the previous commit. (forwarded request 196847 from elvigia)
OBS-URL: https://build.opensuse.org/request/show/196848
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=72
2013-09-02 12:55:29 +00:00
Cristian Rodríguez
4281e40e7d
Accepting request 196847 from home:elvigia:branches:Apache
...
- Really use %requires_ge for libapr1 and libapr-util1
mentioned but not implemented in the previous commit.
OBS-URL: https://build.opensuse.org/request/show/196847
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=389
2013-08-30 04:51:32 +00:00
Cristian Rodríguez
817593e1a4
Accepting request 196621 from home:elvigia:branches:Apache
...
OBS-URL: https://build.opensuse.org/request/show/196621
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=388
2013-08-28 08:08:21 +00:00
Cristian Rodríguez
5c9e18bb5e
Accepting request 196614 from home:elvigia:branches:Apache
...
- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.
OBS-URL: https://build.opensuse.org/request/show/196614
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=387
2013-08-28 07:32:31 +00:00
Stephan Kulow
54726bcd73
Accepting request 185675 from Apache
...
- Make the default keysize in the sample gensslcerts 2048 bits to match
government recommendations. (forwarded request 185577 from msmeissn)
OBS-URL: https://build.opensuse.org/request/show/185675
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=71
2013-08-04 14:48:07 +00:00
Cristian Rodríguez
efb0f36327
Accepting request 185577 from home:msmeissn:branches:Apache
...
- Make the default keysize in the sample gensslcerts 2048 bits to match
government recommendations.
OBS-URL: https://build.opensuse.org/request/show/185577
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=386
2013-08-02 18:44:55 +00:00
Stephan Kulow
52813ccc10
Accepting request 185351 from Apache
...
- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires) (forwarded request 185347 from elvigia)
OBS-URL: https://build.opensuse.org/request/show/185351
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=70
2013-08-01 15:14:24 +00:00
Cristian Rodríguez
0652f52358
Accepting request 185347 from home:elvigia:branches:Apache
...
- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)
OBS-URL: https://build.opensuse.org/request/show/185347
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=385
2013-08-01 02:55:58 +00:00
Stephan Kulow
07be0a94b2
Accepting request 184903 from Apache
...
- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
due to kernel bugs. that's a silly thing to do here
as kernel bugs have to be fixed at their source, not worked around
in applications. (forwarded request 184902 from elvigia)
OBS-URL: https://build.opensuse.org/request/show/184903
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=69
2013-07-30 16:37:14 +00:00
Cristian Rodríguez
148df8527a
Accepting request 184902 from home:elvigia:branches:Apache
...
- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
due to kernel bugs. that's a silly thing to do here
as kernel bugs have to be fixed at their source, not worked around
in applications.
OBS-URL: https://build.opensuse.org/request/show/184902
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=384
2013-07-29 23:51:31 +00:00
Cristian Rodríguez
47f165c1bd
Accepting request 184028 from home:elvigia:branches:Apache
...
- httpd-event-ssl.patch: from upstream
Lift the restriction that prevents mod_ssl taking
full advantage of the event MPM.
OBS-URL: https://build.opensuse.org/request/show/184028
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=383
2013-07-22 22:00:14 +00:00
Cristian Rodríguez
647cfe7aba
Accepting request 184014 from home:elvigia:branches:Apache
...
- Update to version 2.4.6
* SECURITY: CVE-2013-1896 (cve.mitre.org)
* SECURITY: CVE-2013-2249 (cve.mitre.org)
* Major updates to mod_lua
* Support for proxying websocket requests
* Higher performant shm-based cache implementation
* Addition of mod_macro for easier configuration management
* As well as several exciting fixes, especially those related to RFC edge
cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
Include the ITK MPM, therefore it has been disabled. This is because
this MPM can now only be provided as a loadable module but we do
not currently build MPMs as shared modules but as independant
binaries and all helpers/startup scripts depend on that behaviour.
It will be fixed in the upcoming weeks/months.
OBS-URL: https://build.opensuse.org/request/show/184014
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=382
2013-07-22 17:04:27 +00:00
Stephan Kulow
e055a10949
Accepting request 179384 from Apache
...
- apache-20-22-upgrade: still no cookie, module authn_file
is ok and must not be disabled on update.
authn_core must however be enabled too. (forwarded request 179383 from elvigia)
OBS-URL: https://build.opensuse.org/request/show/179384
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=68
2013-07-02 10:20:12 +00:00
Cristian Rodríguez
8ec9a9f331
Accepting request 179383 from home:elvigia:branches:Apache
...
- apache-20-22-upgrade: still no cookie, module authn_file
is ok and must not be disabled on update.
authn_core must however be enabled too.
OBS-URL: https://build.opensuse.org/request/show/179383
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=381
2013-06-18 07:44:40 +00:00
Cristian Rodríguez
6c94b60b21
Accepting request 179377 from home:elvigia:branches:Apache
...
- fix apache_mmn spec macro, otherwise all modules down
the chain will have broken dependencies
OBS-URL: https://build.opensuse.org/request/show/179377
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=380
2013-06-18 06:46:24 +00:00
Cristian Rodríguez
c386f992ca
Accepting request 179374 from home:elvigia:branches:Apache
...
- remove After=mysql.service php-fpm.service postgresql.service
which were added in the previous change, those must be added
as Before=apache2.service in the respective services.
- Include mod_systemd for more complete integration with
systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
but mod_spdy does not support apache 2.4
- apache 2.4.4
* fix for CVE-2012-3499
* fix for the CRIME attack (disable ssl compression by default)
* many other bugfies
* build access_compat amd unixd as static modules and solve
some other upgrade quirks (bnc#813705)
OBS-URL: https://build.opensuse.org/request/show/179374
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=379
2013-06-18 05:57:29 +00:00
Stephan Kulow
f98d1a791c
Accepting request 157654 from Apache
...
Automatic submission by obs-autosubmit
OBS-URL: https://build.opensuse.org/request/show/157654
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=67
2013-03-08 08:50:00 +00:00
Cristian Rodríguez
86ea9c10f2
Accepting request 156289 from home:mlin7442:branches:Apache
...
Install apache2.service accordingly (/usr/lib/systemd for 12.3 and up or /lib/systemd for older versions)
OBS-URL: https://build.opensuse.org/request/show/156289
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=378
2013-02-25 18:49:36 +00:00
163ede5f9d
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=377
2013-01-28 09:04:59 +00:00
Cristian Rodríguez
01f74d8ce8
Accepting request 149979 from home:elvigia:branches:Apache
...
- Apache 2.4.3
* SECURITY: CVE-2012-3502
* SECURITY: CVE-2012-2687
* mod_cache: Set content type in case we return stale content.
* lots of bugfixes see http://www.apache.org/dist/httpd/CHANGES_2.4.3
- Improve systemd unit file (tested for months)
OBS-URL: https://build.opensuse.org/request/show/149979
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=376
2013-01-28 03:33:43 +00:00
Stephan Kulow
1ab8fcfc72
Accepting request 149660 from home:dimstar:branches:openSUSE:Factory
...
Fix build in Facotry - ignore the -devel branch which had the urge to move in time
OBS-URL: https://build.opensuse.org/request/show/149660
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=65
2013-01-24 09:43:13 +00:00
e22b74353a
Accepting request 148936 from home:-miska-:branches:Apache
...
- - use %set_permissions instead %run_permissions (bnc#764097)
OBS-URL: https://build.opensuse.org/request/show/148936
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=375
2013-01-18 17:45:43 +00:00