1

• Files Changed
• Browse Source

1

• Files Changed
• Browse Source

1

• Files Changed
• Browse Source

1

• Files Changed
• Browse Source

- the following unused patches were removed from the package:
  * apache2-mod_ssl_npn.patch
  * httpd-2.0.49-log_server_status.dif 

- 700 permissions for /usr/sbin/apache2-systemd-ask-pass and
  /usr/sbin/start_apache2 [bnc#851627]

- allow only TCP ports in Yast2 firewall files

- more 2.2 -> 2.4 [bnc#862058]

- ServerSignature=Off and ServerTokens=Prod by request from 
  security team [bnc#716495]

- fix documentation links 2.2 -> 2.4 [bnc#888163] (internal)

- Update package Summary and Description. 
- version 2.4.10
* SECURITY: CVE-2014-0117 (cve.mitre.org)
* SECURITY: CVE-2014-3523 (cve.mitre.org)
* SECURITY: CVE-2014-0226 (cve.mitre.org)
* SECURITY: CVE-2014-0118 (cve.mitre.org)
* SECURITY: CVE-2014-0231 (cve.mitre.org)
* Multiple bugfixes to mod_ssl, mod_cache, mod_deflate, mod_lua
* mod_proxy_fcgi supports unix sockets.

- provide httpd.service as alias for apache2.service for
  compatibility reasons (bnc#888093)

- move most ssl options to ssl-global.conf. There is usually no need

• Files Changed
• Browse Source

Split 13.2 from Factory

• Files Changed
• Browse Source

- version 2.4.9 
* SECURITY: CVE-2014-0098
* SECURITY: CVE-2013-6438
* multiple bugfixes and improvements to mod_ssl, mod_lua,
  mod_session and core, see CHANGES for details. (forwarded request 227796 from elvigia)

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

Correct apache2.changes, mention the drop of httpd-event-ssl.patch (forwarded request 214772 from aeneas_jaissle)

• Files Changed
• Browse Source

- httpd-mod_ssl_ephemeralkeyhandling.patch obsoletes
 mod_ssl-2.4.x-ekh.diff this new patch is the final
  form of the rework, merged for 2.4.7. (forwarded request 207095 from elvigia)

• Files Changed
• Browse Source

Removed obsolete directive DefaultType bnc#848146
Changed access control to use new Require type directives (forwarded request 205788 from fdekruijf)

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

- Correct build in old distros. 

- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.

- make mod_systemd static so scenarios described in 
  [bnc#846897] do not happen again. (forwarded request 204342 from elvigia)

• Files Changed
• Browse Source

Fix SUSE spelling. (forwarded request 203323 from a_jaeger)

• Files Changed
• Browse Source

Split 13.1 from Factory

• Files Changed
• Browse Source

- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only 
  inhibits the parent from forking, not quite the same as 
  running in well.. the foreground as required. (forwarded request 197315 from elvigia)

• Files Changed
• Browse Source

- Really use %requires_ge for libapr1 and libapr-util1 
  mentioned but not implemented in the previous commit. (forwarded request 196847 from elvigia)

• Files Changed
• Browse Source

- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations. (forwarded request 185577 from msmeissn)

• Files Changed
• Browse Source

- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires) (forwarded request 185347 from elvigia)

• Files Changed
• Browse Source

- provide and obsolete mod_macro 
- upgrade: some people complain that log_config module 
 is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here 
  as kernel bugs have to be fixed at their source, not worked around
  in applications. (forwarded request 184902 from elvigia)

• Files Changed
• Browse Source