Luboš Uhliarik
92e639b8c0
Resolves : #1401530 - CVE-2016-8740 httpd: Incomplete handling of
...
LimitRequestFields directive in mod_http2
2016-12-05 17:21:33 +01:00
Joe Orton
0d708eba11
fix build with OpenSSL 1.1 ( #1392900 )
...
- fix typos in ssl.conf (josef randinger, #1379407 )
Resolves: rhbz#1392900
Resolves: rhbz#1379407
2016-11-14 10:46:52 +00:00
Joe Orton
45529bc72a
synch ssl.conf with upstream
2016-11-02 11:33:05 +00:00
Joe Orton
70c651fe5c
no longer package /etc/sysconfig/httpd
2016-11-02 11:32:07 +00:00
Joe Orton
4a0435cd7b
add security fix for CVE-2016-5387
2016-07-18 16:31:52 +01:00
Joe Orton
17ef1b1f5e
load mod_watchdog by default ( #1353582 )
...
Resolves: rhbz#1325883
Resolves: rhbz#1353582
2016-07-07 19:29:00 +01:00
Joe Orton
53f8164b15
restore build of mod_proxy_fdpass ( #1325883 )
...
- improve check tests to catch configured-but-not-built modules
Resolves: rhbz#1325883
2016-07-07 15:27:42 +01:00
Joe Orton
a67a8d7392
update to 2.4.23 ( #1325883 , #1353203 )
...
- load mod_proxy_hcheck
- recommend use of "systemctl edit" in httpd.service
Resolves: rhbz#1353203
Resolves: rhbz#1325883
2016-07-07 13:22:30 +01:00
Petr Písař
aaf7efcca6
Mandatory Perl build-requires added < https://fedoraproject.org/wiki/Changes/Build_Root_Without_Perl >
2016-06-24 09:44:53 +02:00
Joe Orton
37b82598ea
have "apachectl graceful" start httpd if not running, per man page
2016-04-07 14:07:25 +01:00
Joe Orton
a4ba0cdfda
use redirects for lang-specific /manual/ URLs
2016-04-06 11:35:45 +01:00
Joe Orton
e67ea8a7b5
fix welcome page HTML validity (Ville Skyttä)
2016-03-18 13:08:34 +00:00
Joe Orton
0f2de0f53c
remove httpd pre script (duplicate of httpd-filesystem's)
...
- in httpd-filesystem pre script, create group/user iff non-existent
2016-03-18 10:18:52 +00:00
Dennis Gilmore
1a66c1a6dd
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
2016-02-03 23:56:42 +00:00
Jan Kaluza
c791d40a6b
update to new version 2.4.18
2015-12-14 09:43:41 +01:00
Joe Orton
47b967cd91
re-enable mod_asis due to popular demand ( #1284315 )
...
Resolves: rhbz#1284315
2015-12-09 16:51:03 +00:00
Jan Kaluza
6abf69b549
fix crash when using -X argument ( #1272234 )
2015-10-26 08:02:55 +01:00
Jan Kaluza
c2c03777d6
rebase socket activation patch to 2.4.17
2015-10-14 10:52:58 +02:00
Joe Orton
91a2788bce
update to 2.4.17 ( #1271224 )
...
- build, load mod_http2
- don't build mod_asis, mod_file_cache
- load mod_cache_socache, mod_proxy_wstunnel by default
- check every built mod_* is configured
- synch ssl.conf with upstream; disable SSLv3 by default
Resolves: rhbz#1271224
2015-10-14 09:06:30 +01:00
Jan Kaluza
c119a5ba7a
Add right tarball...
2015-07-16 09:36:06 +02:00
Jan Kaluza
0d4633dbd4
Add missing tarball
2015-07-16 09:28:27 +02:00
Jan Kaluza
1cdbc457b3
update to 2.4.16
2015-07-15 15:29:48 +02:00
Joe Orton
db205dad27
mod_ssl: use "localhost" in the dummy SSL cert if len(FQDN) > 59 chars
2015-07-07 09:41:55 +01:00
Dennis Gilmore
b274835c1b
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
2015-06-17 10:36:22 +00:00
Jan Kaluza
16a9524e26
update to 2.4.12
2015-03-27 09:33:08 +01:00
Jan Kaluza
571518a2a6
fix compilation with lua-5.3
2015-03-24 10:16:44 +01:00
Jan Kaluza
07b85b43f8
remove filter for auto-provides of httpd modules, it is not needed since F20
2015-03-24 09:41:33 +01:00
Jan Kaluza
af9996ce69
core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
...
- mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)
- mod_proxy_fcgi: fix a potential crash with long headers (CVE-2014-3583)
- mod_lua: fix handling of the Require line when a LuaAuthzProvider is used
in multiple Require directives with different arguments (CVE-2014-8109)
2014-12-17 09:25:50 +01:00
Joe Orton
8c01244b34
require apr-util 1.5.x
2014-10-14 10:53:35 +01:00
Jan Kaluza
5d7dedd78c
use NoDelay and DeferAcceptSec in httpd.socket
2014-09-18 08:04:18 +02:00
Jan Kaluza
46346fae47
increase suexec minimum acceptable uid/gid to 1000 ( #1136391 )
2014-09-08 14:12:40 +02:00
Jan Kaluza
b430bfe6b0
fix hostname requirement and conflict with openssl-libs
2014-09-03 16:17:05 +02:00
Jan Kaluza
36930381bc
use KillMode=mixed in httpd.service ( #1135122 )
2014-09-01 09:32:54 +02:00
Joe Orton
92ee9cf626
set vstring based on /etc/os-release (Pat Riehecky, #1114539 )
...
Resolves: rhbz#1114539
2014-08-29 16:13:01 +01:00
Joe Orton
793563ad40
pull in httpd-filesystem as Requires(pre) ( #1128328 )
...
- fix cipher selection in default ssl.conf, depend on new OpenSSL (#1134348 )
- require hostname for mod_ssl post script (#1135118 )
Resolves: rhbz#1135118
Resolves: rhbz#1134348
Resolves: rhbz#1128328
2014-08-29 14:45:59 +01:00
Joe Orton
452da8d9b6
pull in httpd-filesystem as Requires(pre) ( #1128328 )
...
Resolves: rhbz#1128328
2014-08-29 14:35:18 +01:00
Jan Kaluza
94399e06f8
mod_systemd: updated to the latest version
...
- use -lsystemd instead of -lsystemd-daemon (#1125084 )
- fix possible crash in SIGINT handling (#958934 )
2014-08-22 12:11:38 +02:00
Joe Orton
4475e3e262
mod_ssl: treat "SSLCipherSuite PROFILE=..." as special ( #1109119 )
...
- switch default ssl.conf to use PROFILE=SYSTEM (#1109119 )
Resolves: rhbz#1109119
2014-08-21 11:32:44 +01:00
Peter Robinson
f65d1ef433
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
2014-08-16 20:45:39 +00:00
Jan Kaluza
5ee418c3b4
add /usr/bin/useradd dependency to -filesystem requires
2014-08-15 09:34:45 +02:00
Jan Kaluza
34169cb8c8
fix creating apache user in pre script ( #1128328 )
2014-08-14 19:45:12 +02:00
Jan Kaluza
bb13a678b7
fix creating apache user in pre script ( #1128328 )
2014-08-14 19:41:29 +02:00
Joe Orton
b46475bf5a
enable mod_request by default for mod_auth_form
...
- move disabled-by-default modules from 00-base.conf to 00-optional.conf
2014-07-31 12:16:47 +01:00
Joe Orton
1fce54ba4f
expand variables in docdir example configs
2014-07-21 22:06:14 +01:00
Joe Orton
94c96741e2
update to 2.4.10
2014-07-21 22:05:49 +01:00
Jan Kaluza
572a5df9ee
add support for systemd socket activation ( #1111648 )
2014-07-08 15:52:58 +02:00
Jan Kaluza
63d5e3d13d
remove conf.modules.d from httpd-filesystem subpackage ( #1081453 )
2014-07-07 13:16:02 +02:00
Jan Kaluza
fa66d3ef87
add httpd-filesystem subpackage ( #1081453 )
2014-07-07 12:47:52 +02:00
Joe Orton
c0bdfa464b
mod_ssl: don't use the default OpenSSL cipher suite in ssl.conf ( #1109119 )
...
Resolves: rhbz#1109119
2014-06-20 10:54:36 +01:00
Dennis Gilmore
2d734473b0
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
2014-06-07 15:31:52 -05:00
Jan Kaluza
5b3da1ff0f
add support for SetHandler + proxy ( #1078970 )
2014-03-28 11:35:30 +01:00
Jan Kaluza
6228c46ec0
move macros from /etc/rpm to macros.d ( #1074277 )
...
- remove unused patches
2014-03-27 12:39:16 +01:00
Jan Kaluza
9f6ae98c27
update to 2.4.9
2014-03-18 07:55:27 +01:00
Joe Orton
8efab6ad85
use 2048-bit RSA key with SHA-256 signature in dummy certificate
2014-02-28 17:45:18 +00:00
Joe Orton
6a627fd53c
Create drop directory for systemd snippets
2014-02-28 08:10:10 +00:00
Joe Orton
15ab7bceeb
Create drop directory for systemd snippets
2014-02-28 08:09:14 +00:00
Jan Kaluza
a035f96c4e
remove provides of old MMN, because it contained double-dash ( #1068851 )
2014-02-27 12:03:34 +01:00
Jan Kaluza
567c7a9431
fix graceful restart using legacy actions
2014-02-20 12:19:52 +01:00
Joe Orton
a2e9cec246
conflict with pre-1.5.0 APR
...
- fix sslsninotreq patch
2013-12-12 14:13:38 +00:00
Joe Orton
ed353d03f2
update to 2.4.7 ( #1034071 )
2013-11-27 17:19:09 +00:00
Joe Orton
fdd0182ac0
switch to requiring system-logos-httpd ( #1031288 )
2013-11-22 19:03:44 +00:00
Joe Orton
353758d2ab
change mmnisa to drop "-" altogether
2013-11-12 12:45:29 +00:00
Joe Orton
b39251e583
drop ambiguous invalid "-" in RHS of httpd-mmn Provide, keeping old Provide
...
for transition
2013-11-12 09:54:01 +00:00
Jan Kaluza
13efaf1ac9
systemd: use {MAINPID} notation to ensure /bin/kill has always the second arg
2013-11-01 12:44:15 +01:00
Jan Kaluza
51fe77bc1f
systemd: use {MAINPID} notation to ensure /bin/kill has always the second arg
2013-11-01 12:43:40 +01:00
Joe Orton
8de85ede52
Merge.
2013-10-31 16:04:17 +00:00
Joe Orton
42eaf6a375
mod_ssl: allow SSLEngine to override Listen-based default (r1537535)
2013-10-31 15:54:58 +00:00
Jan Kaluza
f735ee187e
Fix merge conflicts
2013-10-24 12:30:13 +02:00
Jan Kaluza
b3f304619b
systemd: send SIGWINCH signal without httpd -k in ExecStop
2013-10-24 12:26:47 +02:00
Joe Orton
aa55b1c6dd
load mod_macro by default ( #998452 )
...
- add README to conf.modules.d
- mod_proxy_http: add possible fix for threading issues (r1534321)
- core: add fix for truncated output with CGI scripts (r1530793)
Resolves: rhbz#998452
2013-10-21 20:17:46 +01:00
Jan Kaluza
15de99261c
require fedora-logos-httpd ( #1009162 )
2013-10-10 08:55:13 +02:00
Jan Kaluza
0527022d9f
revert fix for dumping vhosts twice
2013-07-31 08:06:52 +02:00
Joe Orton
e90db98c1f
update to 2.4.6
...
- mod_ssl: use revised NPN API (r1487772)
2013-07-22 17:39:21 +01:00
Joe Orton
3b5640856d
mod_unique_id: replace use of hostname + pid with PRNG output ( #976666 )
...
- apxs: mention -p option in manpage
2013-07-22 17:03:38 +01:00
Jan Kaluza
2bc59c9a44
mod_unique_id: replace use of hostname + pid with PRNG output ( #976666 )
...
- apxs: mention -p option in manpage
2013-07-11 09:25:13 +02:00
Joe Orton
0fcd609ffe
add patch for aarch64 (Dennis Gilmore, #925558 )
...
Resolves: rhbz#925558
2013-07-02 16:43:29 +01:00
Joe Orton
6d8684fc6a
remove duplicate apxs man page from httpd-tools
2013-07-01 12:47:28 +01:00
Joe Orton
2c793419b9
remove zombie dbmmanage script
2013-06-17 16:11:50 +01:00
Jan Kaluza
3d06e82ead
return 400 Bad Request on malformed Host header
2013-05-31 12:42:42 +02:00
Jan Kaluza
0b19f7b6e1
ignore /etc/sysconfig/httpd and document systemd way of setting env variables in this file
2013-05-24 10:24:09 +02:00
Jan Kaluza
46396bf734
htpasswd/htdbm: fix hash generation bug ( #956344 )
...
- do not dump vhosts twice in httpd -S output (#928761 )
- mod_cache: fix potential crash caused by uninitialized variable (#954109 )
2013-05-20 09:54:07 +02:00
Jan Kaluza
e3774a7565
mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured
2013-04-18 08:47:04 +02:00
Jan Kaluza
3f84aef712
forward-port CacheMaxExpire "hard" option
2013-04-18 08:22:20 +02:00
Jan Kaluza
08bb147aa8
mod_ssl: ignore SNI hints unless required by config
2013-04-18 07:50:29 +02:00
Jan Kaluza
9de9bf8dd6
execute systemctl reload as result of apachectl graceful
2013-04-18 07:41:11 +02:00
Jan Kaluza
110beb1317
fix service file to not send SIGTERM after ExecStop ( #906321 , #912288 )
2013-04-16 14:11:13 +02:00
Jan Kaluza
f3b6742d9b
protect MIMEMagicFile with IfModule ( #893949 )
2013-03-27 09:42:23 +01:00
Joe Orton
ef6affde7d
really package mod_auth_form in mod_session ( #915438 )
...
Resolves: rhbz#915438
2013-02-26 10:14:44 +00:00
Joe Orton
cb59f09544
- fix duplicate ownership of mod_session config ( #914901 )
2013-02-26 09:46:28 +00:00
Joe Orton
a6b2023764
Merge 2.4.4 changes.
2013-02-26 09:45:09 +00:00
Joe Orton
a3c2292edd
update to 2.4.4
2013-02-26 09:37:09 +00:00
Joe Orton
d70345aecd
add mod_session subpackage, move mod_auth_form there ( #894500 )
...
Resolves: rhbz#894500
2013-02-22 13:59:36 +01:00
Dennis Gilmore
9a2c5cf84b
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
2013-02-13 19:16:50 -06:00
Joe Orton
55e18b467e
add systemd service for htcacheclean
2013-01-08 13:19:12 +00:00
Joe Orton
ce68488a8e
drop patch for r1344712
2012-11-13 16:49:42 +00:00
Joe Orton
402cdf6b80
filter mod_*.so auto-provides (thanks to rcollet)
...
- pull in syslog logging fix from upstream (r1344712)
2012-11-13 16:32:01 +00:00
Joe Orton
a9defba46a
rebuild to pick up new apr-util-ldap
2012-10-26 15:05:43 +01:00
Joe Orton
9d51ec6bd5
rebuild
2012-10-23 10:04:37 +01:00
Joe Orton
c6e80d081a
pull upstream patch r1392850 in addition to r1387633
2012-10-03 13:50:44 +01:00
Joe Orton
3027873c99
define PLATFORM in os.h using vendor string
2012-10-01 13:23:34 +01:00