summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStefan Fritsch <sf@sfritsch.de>2014-03-29 22:09:46 +0100
committerStefan Fritsch <sf@sfritsch.de>2014-03-29 22:09:46 +0100
commit0b37951c6baaf39e54038a7951fbf021d1498046 (patch)
tree435fd5c8bbe0fd9e2f30b0531812b1bec22f1909
parent90d6f91d496d1e7b6b33fafd7afdfdb9a7b5be74 (diff)
downloadapache2-0b37951c6baaf39e54038a7951fbf021d1498046.tar.gz
Adapt to 2.4.9
* remove obsolete find_config_m4_LP1251939 patch * changelog
-rw-r--r--debian/changelog25
-rw-r--r--debian/patches/find_config_m4_LP125193931
-rw-r--r--debian/patches/series1
3 files changed, 21 insertions, 36 deletions
diff --git a/debian/changelog b/debian/changelog
index 81912754..e8e65749 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,14 +1,31 @@
-apache2 (2.4.7-2) UNRELEASED; urgency=medium
+apache2 (2.4.9-1) UNRELEASED; urgency=medium
+ * New upstream version.
+ Security fixes:
+ - CVE-2013-6438: mod_dav: Fix DoS from crafted DAV WRITE requests.
+ - CVE-2014-0098: mod_log_config: Fix segfaults when logging truncated
+ cookies.
+ Notable new features:
+ - Support named groups and backreferences within the LocationMatch,
+ DirectoryMatch, FilesMatch and ProxyMatch directives.
+ - mod_proxy: Added support for unix domain sockets as the backend server
+ endpoint.
+ - mod_ssl: Add support for OpenSSL configuration commands by introducing
+ the SSLOpenSSLConfCmd directive.
+ - mod_authz_user, mod_authz_host, mod_authz_groupfile, mod_authz_dbm,
+ mod_authz_dbd, mod_authnz_ldap: Support the expression parser within the
+ require directives.
+ - mod_rewrite: Add RewriteOptions InheritDown, InheritDownBefore,
+ and IgnoreInherit.
+ - Bugfix in the build system to avoid problems with patched config.m4
+ files as in LP #1251939.
* Make default cipher list in ssl.conf more secure:
- Remove 'MEDIUM'. This disables RC4 and SEED. Also remove '!MD5' because
'HIGH' does not include MD5.
- Remove the 'Speed-optimized SSL Cipher' configuration example because
it depends on RC4, which is considered insecure.
- * Patch the build system to avoid problems with patched config.m4's
- as in LP #1251939 in the future.
- -- Stefan Fritsch <sf@debian.org> Sun, 12 Jan 2014 22:56:52 +0100
+ -- Stefan Fritsch <sf@debian.org> Sat, 29 Mar 2014 22:06:50 +0100
apache2 (2.4.7-1) unstable; urgency=low
diff --git a/debian/patches/find_config_m4_LP1251939 b/debian/patches/find_config_m4_LP1251939
deleted file mode 100644
index 38c957e1..00000000
--- a/debian/patches/find_config_m4_LP1251939
+++ /dev/null
@@ -1,31 +0,0 @@
-LP: #1251939
-
-commit 60f2545f1858415d31dcf0bb625262216c7821cd
-Author: Stefan Fritsch <sf@apache.org>
-Date: Sat Nov 16 23:49:04 2013 +0000
-
- Explicitly list in which directories to look for config*.m4 files.
-
- If some distributor patches a config*.m4 file with quilt, that will
- place a copy of the original file in .pc/ . Doing a naive "find ."
- will then cause both the original and the patched m4 file to be included,
- causing havoc later on.
-
- PR: 55787
-
-
- git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1542615 13f79535-47bb-0310-9956-ffa450edef68
-
-Index: apache2/build/config-stubs
-===================================================================
---- apache2.orig/build/config-stubs
-+++ apache2/build/config-stubs
-@@ -15,7 +15,7 @@
- # config files without a number are sorted before those with a number.
- #
-
--configfiles=`find . -name "config*.m4" | \
-+configfiles=`find os server modules support -name "config*.m4" | \
- sed 's#\(.*/config\)\(.*\).m4#\20 \1\2.m4#' | \
- sort | \
- sed 's#.* ##'`
diff --git a/debian/patches/series b/debian/patches/series
index fcb19af8..fce31717 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -5,4 +5,3 @@ customize_apxs.patch
build_suexec-custom.patch
# This patch is applied manually
#suexec-custom.patch
-find_config_m4_LP1251939