openSUSE Build Service

Petr Gajdos (pgajdos) committed over 2 years ago (revision 661)

Petr Gajdos (pgajdos) accepted request 941644 from

David Anes (david.anes) over 2 years ago (revision 660)

Update to 2.4.52

Petr Gajdos (pgajdos) committed over 2 years ago (revision 659)

- httpd-framework updated to svn1894461
- added patches
  fix reverted logic, DirectorySlash NotFound is available in trunk only
  + apache-test-DirectorySlash-NotFound-logic.patch
- do not consider php tests, they do not run anyway

Petr Gajdos (pgajdos) accepted request 931327 from

Arjen de Korte (adkorte) over 2 years ago (revision 658)

- add section for the 'event' MPM to apache2-server-tuning.conf

Petr Gajdos (pgajdos) accepted request 924064 from

Michael Ströder (stroeder) over 2 years ago (revision 657)

- version update to 2.4.51
  *) SECURITY: CVE-2021-42013: Path Traversal and Remote Code
     Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete
     fix of CVE-2021-41773) (cve.mitre.org)
  *) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
     unused AP_NORMALIZE_DROP_PARAMETERS flag.

Petr Gajdos (pgajdos) accepted request 923076 from

Michael Ströder (stroeder) over 2 years ago (revision 656)

version update to 2.4.50

Petr Gajdos (pgajdos) committed over 2 years ago (revision 655)

- version update to 2.4.49
  *) core/mod_proxy/mod_ssl:
     Adding `outgoing` flag to conn_rec, indicating a connection is
     initiated by the server to somewhere, in contrast to incoming
     connections from clients.
     Adding 'ap_ssl_bind_outgoing()` function that marks a connection
     as outgoing and is used by mod_proxy instead of the previous
     optional function `ssl_engine_set`. This enables other SSL
     module to secure proxy connections.
     The optional functions `ssl_engine_set`, `ssl_engine_disable` and
     `ssl_proxy_enable` are now provided by the core to have backward
     compatibility with non-httpd modules that might use them. mod_ssl
     itself no longer registers these functions, but keeps them in its
     header for backward compatibility.
     The core provided optional function wrap any registered function
     like it was done for `ssl_is_ssl`.
     [Stefan Eissing]
  *) mod_ssl: Support logging private key material for use with
     wireshark via log file given by SSLKEYLOGFILE environment
     variable.  Requires OpenSSL 1.1.1.  PR 63391.  [Joe Orton]
  *) mod_proxy: Do not canonicalize the proxied URL when both "nocanon" and
     "ProxyPassInterpolateEnv On" are configured.  PR 65549.
     [Joel Self <joelself gmail.com>]
  *) mpm_event: Fix children processes possibly not stopped on graceful
     restart.  PR 63169.  [Joel Self <joelself gmail.com>]
  *) mod_proxy: Fix a potential infinite loop when tunneling Upgrade(d)
     protocols from mod_proxy_http, and a timeout triggering falsely when
     using mod_proxy_wstunnel, mod_proxy_connect or mod_proxy_http with
     upgrade= setting.  PRs 65521 and 65519.  [Yann Ylavic]
  *) mod_unique_id: Reduce the time window where duplicates may be generated

Petr Gajdos (pgajdos) committed almost 3 years ago (revision 654)

- introduce APACHE_TACEENABLE sysconfig variable, which translates
  to /etc/apache2/sysconfig.d/global.conf:TraceEnable on/off
- modified sources
  % apache2-global.conf
  % apache2-start_apache2
  % sysconfig.apache2

buildservice-autocommit accepted request 896869 from

Petr Gajdos (pgajdos) about 3 years ago (revision 653)

baserev update by copy to link target

Petr Gajdos (pgajdos) committed about 3 years ago (revision 652)

Petr Gajdos (pgajdos) committed about 3 years ago (revision 651)

- version update to 2.4.48
  
  Changes with Apache 2.4.48
  *) mod_proxy_wstunnel: Add ProxyWebsocketFallbackToProxyHttp to opt-out the
     fallback to mod_proxy_http for WebSocket upgrade and tunneling.
     [Yann Ylavic]
  *) mod_proxy: Fix flushing of THRESHOLD_MIN_WRITE data while tunneling.
     BZ 65294.  [Yann Ylavic]
  *) core: Fix a regression that stripped the ETag header from 304 responses.
     PR 61820 [Ruediger Pluem, Roy T. Fielding]
  *) core: Adding SSL related inquiry functions to the server API.
     These function are always available, even when no module providing
     SSL is loaded. They provide their own "shadowing" implementation for
     the optional functions of similar name that mod_ssl and impersonators
     of mod_ssl provide.
     This enables loading of several SSL providing modules when all but
     one of them registers itself into the new hooks. Two old-style SSL
     modules will not work, as they replace the others optional functions
     with their own.
     Modules using the old-style optional functions will continue to work
     as core supplies its own versions of those.
     The following has been added so far:
     - ap_ssl_conn_is_ssl() to query if a connection is using SSL.
     - ap_ssl_var_lookup() to query SSL related variables for a
       server/connection/request.
     - Hooks for 'ssl_conn_is_ssl' and 'ssl_var_lookup' where modules
       providing SSL can install their own value supplying functions.
     - ap_ssl_add_cert_files() to enable other modules like mod_md to provide
       certificate and keys for an SSL module like mod_ssl.
     - ap_ssl_add_fallback_cert_files() to enable other modules like mod_md to

buildservice-autocommit accepted request 867750 from

Callum Farmer (gmbr3) over 3 years ago (revision 650)

baserev update by copy to link target

Petr Gajdos (pgajdos) accepted request 867271 from

Callum Farmer (gmbr3) over 3 years ago (revision 649)

- Add lua54.patch to fix building with lua54

buildservice-autocommit accepted request 865992 from

Petr Gajdos (pgajdos) over 3 years ago (revision 648)

baserev update by copy to link target

Petr Gajdos (pgajdos) accepted request 865975 from

Michael Ströder (stroeder) over 3 years ago (revision 647)

- added Provides: http_daemon to fix bsc#1180132

Petr Gajdos (pgajdos) committed over 3 years ago (revision 646)

- remove suexec2 from premissions as well
- modified sources
  % permissions.apache2

- suexec2 was renamed to suexec in 2015 and the symlink to suexec
  no longer exists

Petr Gajdos (pgajdos) committed over 3 years ago (revision 645)

Petr Gajdos (pgajdos) accepted request 862975 from

Arjen de Korte (adkorte) over 3 years ago (revision 644)

- suexec2 was renamed to suexec in 2015 and the symlink to suexec
  no longer exists

Petr Gajdos (pgajdos) accepted request 862727 from

Christian Boltz (cboltz) over 3 years ago (revision 643)

- re-add rcapache2 symlink (was lost about 6 weeks ago)

Petr Gajdos (pgajdos) committed over 3 years ago (revision 642)

- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % apache2-gensslcert

Places

Revisions of apache2

Places