# changelog

author: Joe Orton <jorton@redhat.com> - 2.2.15-11
changelog:
  - rebase mod_reqtimeout to 2.2.17 (#676634)
  - mod_proxy_ajp: honour ProxyErrorOverride (#694939)
  - mod_ssl: add fix for handling incomplete lines w/revproxy (#700074)
  - mod_filter: fix matching against non-std response headers (#700075)
  - core: abort() on malloc() failure (#700393)
  - mod_ssl: fix startup crash w/client cert shared across vhosts (#720980)


author: Joe Orton <jorton@redhat.com> - 2.2.15-12
changelog:
  - mod_ssl: ignore SNI hints unless required by config (#714704)
  - mod_ssl: fix segfault with bad SSLCryptoDevice argument (#729585)


author: Joe Orton <jorton@redhat.com> - 2.2.15-15
changelog:
  - mod_proxy_ftp: fix handling of EPSV w/IPv6 localhost (#737960)
  - core: add security fix for CVE-2011-3368 (#743659)
  - mod_proxy_ajp: add security fix for CVE-2011-3348 (#738961)
  - mod_cache: forward-port CacheMaxExpire "hard" option (#740242)


author: Joe Orton <jorton@redhat.com> - 2.2.15-15.1
changelog:
  - add security fixes for CVE-2011-4317, CVE-2012-0053, CVE-2012-0031,
    CVE-2011-3607 (#787598)
  - obviates fix for CVE-2011-3638, patch removed


author: Jan-Frode Myklebust <janfrode@tanso.net> - 0.97-12
changelog:
  - Move deletion of /var/lib/clamav/mirrors.dat to db package.
  - Don't enable NotifyClamd in freshclam config and cronjob, as not
    everybody is running clamd. Running clamd's will anyway notice
    when db is updated.


author: Jan-Frode Myklebuust <janfrode@tanso.net> - 0.97.2-3
changelog:
  - include updated clamd-wrapper which get the PidFile setting from the
    service configuration file. 
  - updated to 0.97.2
  - Build-require xz
  - CVE-2011-2721 Off-by-one error by scanning message hashes (#725694)


author: Nick Bebout <nb@fedoraproject.org> - 0.97.5-1
changelog:
  - Upgrade to 0.97.5
  - Fix CVE-2012-1419 clamav: specially-crafted POSIX tar files evade detection
  - Fix CVE-2012-1457 clamav: overly long length field in tar files evade detection
  - Fix CVE-2012-1443 clamav: specially-crafted RAR files evade detection
  - Fix CVE-2012-1458 clamav: specially-crafted CHM files evade detection
  - Fix CVE-2012-1459 clamav: specially-crafted length field in tar files evade detection
  - Ship local copy of virus database; it was removed by accident from 0.97.5 tarball


author: Jan-Frode Myklebust <janfrode@tanso.net> - 0.97-10
changelog:
  - Make sure /var/lib/clamav/mirrors.dat has owner fixed on upgrade.
  - Don't start clamd or milter service by default.


author: Jan-Frode Myklebust <janfrode@tanso.net> - 0.97-11
changelog:
  - Delete /var/lib/clamav/mirrors.dat, it will be recreated on first run.
  - clamav-milter config cleanups.


author: Philip Prindeville <philipp@fedoraproject.org> - 0.97.3-2
changelog:
  - Add missing clamd-wrapper supporting files
  - Remove from init script the unused CLAMD_SOCKET variable


author: Sergey Budnevitch <sb@nginx.com>
changelog:
  - spec file cleanup (thanks to Yury V. Zaytsev)
  - log dir permitions fixed
  - logrotate creates new logfiles with nginx owner
  - "upgrade" argument to init-script added (based on fedora one)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-40
changelog:
  - mod_proxy: do not mix workers shared memory during graceful restart (#1149906)
  - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache
    are used and SSL session is resumed (#1149703)
  - mod_ssl: log revoked certificates at the INFO level (#1161328)
  - mod_ssl: use -extensions v3_req for certificate generation (#906476)
  - core: check the config file before restarting the server (#1146194)
  - core: do not match files when using DirectoryMatch (#1016963)
  - core: improve error message for inaccessible DocumentRoot (#987590)
  - rotatelogs: improve support for localtime (#922844)
  - mod_deflate: fix decompression of files larger than 4GB (#1057695)
  - ab: fix integer overflow when printing stats with lot of requests (#1092419)
  - ab: try all addresses instead of failing on first one when not available (#1125269)
  - ab: fix read failure when targeting SSL server (#1045477)
  - apachectl: support HTTPD_LANG variable from /etc/sysconfig/httpd (#963146)
  - do not display "bomb" icon for files ending with "core" (#1069625)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-25
changelog:
  - htcacheclean: exit with code 4 if nonprivileged user runs initscript (#805810)
  - rotatelogs: omit the second arg when invoking a post-rotate program (#876923)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-30
changelog:
  - mod_dav: add security fix for CVE-2013-6438 (#1078174)
  - mod_log_config: add security fix for CVE-2014-0098 (#1078174)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-31
changelog:
  - mod_cgid: add security fix for CVE-2014-0231
  - mod_deflate: add security fix for CVE-2014-0118
  - mod_status: add security fix for CVE-2014-0226


author: Joe Orton <jorton@redhat.com> - 2.2.15-3
changelog:
  - add "Satisfy All" for .htaccess in httpd.conf (#594981)
  - adjust user/group creation in %pre (#594395)
  - mod_ssl: tweak OID() evaluation of unknown exts (#594980)


author: Joe Orton <jorton@redhat.com> - 2.2.15-4
changelog:
  - use init script to rotate logs (#606955)
  - disable keepalive for 100-continue and error response (#606964)


author: Joe Orton <jorton@redhat.com> - 2.2.15-6
changelog:
  - ab: fail gracefully for OOM allocating stats structures (#645846)
  - init script: use $STOP_DELAY as delay before SIGKILL of parent (#657480)
  - stop multiple invocations of filter init functions (#631849)
  - mod_ssl: avoid overlapping memcpy (#652335)
  - mark httpd.conf as noreplace


author: Joe Orton <jorton@redhat.com> - 2.2.15-7
changelog:
  - mod_ldap: fix caching with per-vhost directive use (#676635)
  - mod_ssl: fix startup with duplicate SSL vhost configurations (#676831)
  - prefork: ensure early child exit during graceful restart (#679476)


author: Paul Howarth <paul@city-fan.org> 1.3.3a-1
changelog:
  - Update to 1.3.3a
    - Added Japanese translation
    - Many mod_sftp bugfixes
    - Fixed SSL_shutdown() errors caused by OpenSSL 0.9.8m and later
    - Fixed handling of utmp/utmpx format changes on FreeBSD


author: Paul Howarth <paul@city-fan.org> 1.3.3b-1
changelog:
  - Update to 1.3.3b
    - Fixed SFTP directory listing bug
    - Avoid corrupting utmpx databases on FreeBSD
    - Avoid null pointer dereferences during data transfers
    - Fixed "AuthAliasOnly on" anonymous login


author: Paul Howarth <paul@city-fan.org> 1.3.3c-1
changelog:
  - Update to 1.3.3c (#647965)
    - Fixed Telnet IAC stack overflow vulnerability (CVE-2010-4221)
    - Fixed directory traversal bug in mod_site_misc (CVE-2010-3867)
    - Fixed SQLite authentications using "SQLAuthType Backend"
  - New DSO module: mod_geoip


author: Paul Howarth <paul@city-fan.org> 1.3.3c-2
changelog:
  - Add /etc/tmpfiles.d/proftpd.conf for builds on Fedora 15 onwards to
    support running with /var/run on tmpfs (#656675)


author: Paul Howarth <paul@city-fan.org> 1.3.3c-3
changelog:
  - Update mod_vroot to 0.9 (improvements to alias handling)
  - Note that the previous default configuration is broken by this change; see
    the new VRootAlias line in proftpd.conf
  - Add Default-Stop LSB keyword in initscript (for runlevels 0, 1, and 6)


author: Paul Howarth <paul@city-fan.org> 1.3.3d-1
changelog:
  - Update to 1.3.3d
    - Fixed sql_prepare_where() buffer overflow (bug 3536)
    - Fixed CPU spike when handling .ftpaccess files
    - Fixed handling of SFTP uploads when compression is used


author: Paul Howarth <paul@city-fan.org> 1.3.3e-1
changelog:
  - Update to 1.3.3e, fixing a large number of bugs reported upstream:
    - Process privileges may not handled properly when --enable-autoshadow is
      used (bug 3757)
    - mod_sftp closes channel too early after scp download (bug 3544)
    - mod_sftp_pam may tell client to disable echoing erroneously (bug 3579)
    - mod_sftp behaves badly when receiving badly formed SSH messages (bug 3586,
      CVE-2011-1137)
    - Using "$shell $libtool" in prxs does not work for all shells (bug 3593)
    - WrapAllowMsg directive broken due to bug 3423 (bug 3538)
    - SocketOptions receive/send buffer size parameters no longer work (bug 3607)
    - mod_wrap2 needs to support netmask rules for IPv6 addresses (bug 3606)
    - APPE/STOU upload flags erroneously preserved across upload commands
      (bug 3612)
    - Malicious module can use sreplace() function to overflow buffer (bug 3614)
    - Exiting sessions don't seem to die properly (bug 3619)
    - mod_delay sometimes logs "unable to load DelayTable into memory" (bug 3622)
    - Plaintext command injection in FTPS support (bug 3624)
    - mod_ifsession rules using regular expressions do not work (bug 3625)
    - Truncated client name saved in ScoreboardFile (bug 3623)
    - %w variable populated with non-absolute path in SQLLog statement (bug 3627)
    - Unnecessarily verbose "warning: unable to throttle bandwidth: Interrupted
      system call" (bug 3628)
    - SSH DISCONNECT messages sent by mod_sftp even for FTP connections in some
      cases (bug 3630)
    - mod_sql should log "unrecoverable database error" at a higher priority
      (bug 3632)
    - Proftpd is eating CPU when reparsing configuration file on SIGHUP (bug 3610)
    - Incorrect generation of DSA signature for SSH sessions (bug 3634)
  - Update mod_vroot to 0.9.2
  - Fix typo in initscript
  - Nobody else likes macros for commands


author: Paul Howarth <paul@city-fan.org> 1.3.3f-1
changelog:
  - Update to 1.3.3f, fixing a large number of bugs reported upstream:
    - Avoid spinning proftpd process if read(2) returns EAGAIN (bug 3639)
    - Segfault seen in mod_sql_mysql if "SQLAuthenticate groupsetfast" used
      (bug 3642)
    - Disable signal handling for exiting session processes (bug 3644)
    - TCPAccessSyslogLevel directive broken by Bug#3317 (bug 3652)
    - TLSVerifyOrder directive is broken (bug 3658)
    - Segmentation fault if there is regex <IfUser> section in a <VirtualHost>
      section; this is a regression caused by a bad backport of the fix for
      Bug#3625 to the 1.3.3 branch (bug 3659)
    - Filenames with embedded IAC do not get processed correctly (bug 3697)
  - Drop upstreamed nostrip patch
  - Use new --disable-strip option to retain debugging symbols
  - Use upstream LDAP quota table schema rather than our own copy


author: Paul Howarth <paul@city-fan.org> 1.3.3g-1
changelog:
  - Update to 1.3.3g, fixing the following bugs:
    - ProFTPD with mod_sql_mysql dies of "Alarm clock" on FreeBSD (bug 3702)
    - Enable OpenSSL countermeasure against SSLv3/TLSv1 BEAST attacks (bug 3704);
      to disable this countermeasure, which may cause interoperability issues
      with some clients, use the NoEmptyFragments TLSOption
    - Response pool use-after-free memory corruption error
      (bug 3711, #752812, ZDI-CAN-1420, CVE-2011-4130)


author: Paul Howarth <paul@city-fan.org> 1.3.3g-2
changelog:
  - Fix possible symlink race when applying UserOwner to newly created directory
    (CVE-2012-6095, #892715, http://bugs.proftpd.org/show_bug.cgi?id=3841)
  - Add -fno-strict-aliasing, needed for mod_radius
  - Drop %defattr, redundant since rpm 4.4


author: Robert Scheck <robert@fedoraproject.org> - 0.98-1
changelog:
  - Upgrade to 0.98 and updated main.cvd and daily.cvd (#1010168)
  - Fixed discrepancies between clamd initscript and clamd config
    file (#960923, thanks to John Horne)
  - Added build requirement to ncurses-devel for clamdtop (again)
  - Moved clamd wrapper script and documentation into correct sub-
    package (#782596, thanks to Philip Prindeville)


author: Robert Scheck <robert@fedoraproject.org> - 0.98-2
changelog:
  - Really fix all discrepancies between clamd initscript and clamd
    config file (#960923, thanks to John Horne)
  - Ensure that a clamd and clamav-milter condrestart via initscript
    works (#1018312, thanks to Filippo Carletti)


author: Paul Wouters <pwouters@redhat.com> - 0.98.3-1
changelog:
  - Upgrade to 0.98.3
  - Fix --with-libcurl parameter to avoid automatic path detection breakage
  - openssl-devel is now required for hashing code.
  - Added clamsubmit to main package
  - Re-enabled --with-llvm as this speeds up deployment a lot.
  - Fixed older changelog dates


author: Robert Scheck <robert@fedoraproject.org> - 0.98.4-1
changelog:
  - Upgrade to 0.98.4 and updated daily.cvd (#1111811)
  - Add build requirement to libxml2 for DMG, OpenIOC and XAR


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-22
changelog:
  - mod_cache: fix header merging for 304 case, thanks to Roy Badami (#868283)
  - mod_cache: fix handling of 304 responses (#868253)


author: Matthias Saou <http://freshrpms.net/> 1.27-4
changelog:
  - Silence %setup.
  - Fix init script mode in the srpm.
  - Remove explicit perl(IO::Multiplex) requirement, not needed on FC6 (but
    probably still on RHEL4).
  - Add a comment line to the empty local whitelist file.


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-21
changelog:
  - mod_proxy_ajp: ignore flushing if headers have not been sent (#853160)
  - mod_proxy_ajp: do not mark worker in error state when one request
    timeouts (#864317)
  - mod_ssl: do not run post script if all files are already created (#752618)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-35
changelog:
  - mod_proxy_http: cleanup bucket brigade even on error (#991556)
  - add missing Reason-Phrase in HTTP response headers (#1032733)
  - mod_ldap: fix crash in uldap_cache_getattrvals (#1048757)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-36
changelog:
  - mod_ssl: Add a wildcard common name match (#1035666)
  - mod_cache: avoid thundering herd (#1094990)
  - mod_cgi: return error code 408 on timeout (#979129)


author: Paul Howarth <paul@city-fan.org> 1.3.2c-1
changelog:
  - Update to 1.3.2c, addressing the following issues:
    - SSL/TLS renegotiation vulnerability (CVE-2009-3555, bug 3324)
    - Failed database transaction can cause mod_quotatab to loop (bug 3228)
    - Segfault in mod_wrap (bug 3332)
    - <Directory> sections can have <Limit> problems (bug 3337)
    - mod_wrap2 segfaults when a valid user retries the USER command (bug 3341)
    - mod_auth_file handles 'getgroups' request incorrectly (bug 3347)
    - Segfault caused by scrubbing zero-length portion of memory (bug 3350)
  - Drop upstreamed segfault patch


author: Paul Howarth <paul@city-fan.org> 1.3.2d-1
changelog:
  - Update to 1.3.2d, addressing the following issues: 
    - mod_tls doesn't compile with pre-0.9.7 openssl (bug 3358) 
    - Lack of PID protection in ScoreboardFile (bug 3370) 
    - Crash when retrying a failed login with mod_radius being used (bug 3372) 
    - RADIUS authentication broken on 64-bit platforms (bug 3381) 
    - SIGHUP eventually causes certain DSO modules to segfault (bug 3387)


author: Paul Howarth <paul@city-fan.org> 1.3.3-1
changelog:
  - Update to 1.3.3 (see NEWS for list of fixed bugs)
  - Update PID file location in initscript
  - Drop upstreamed patches
  - Upstream distribution now includes mod_exec, so drop unbundled source
  - New DSO modules:
    - mod_sftp
    - mod_sftp_pam
    - mod_sftp_sql
    - mod_shaper
    - mod_sql_passwd
    - mod_tls_shmcache
  - Configure script no longer appends "/proftpd" to --localstatedir option
  - New utility ftpscrub for scrubbing the scoreboard file
  - Include public key blacklist and Diffie-Hellman parameter files for mod_sftp
    in %{_sysconfdir}
  - Remove IdentLookups from config file - disabled by default now


author: Joe Cooper <joe@virtualmin.com>
changelog:
  - Moved all distro neutral files into "universal" repo, which should
    save a lot of maintenance time


author: Joe Cooper <joe@virtualmin.com>
changelog:
  - Removed the up2date stuff...we have to use yum
  - Added import of the system RPM-GPG-KEY files, as it causes errors during
    install if we don't have them.


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 4.4.2-1900
changelog:
  - updated to 4.4.2
  - rediffed patches and removed obsolete ones
  - enabled hardened build
  - enabled PrivateTmp for systemd


author: Paul Howarth <paul@city-fan.org> - 4.4.2-1902
changelog:
  - Drop unused upstart support
  - Drop unused libspf support
  - Drop %defattr, redundant since rpm 4.4
  - Merge sysv/system packages back into main package, configuring appropriate
    initscrit for target distribution
  - Move tmpfiles configuration from /etc to /usr/lib
  - Re-do scriptlets


author: Paul Howarth <paul@city-fan.org> - 4.5.1-1
changelog:
  - Update to 4.5.1
    - More Solaris build fixes
    - Fix swapped %f and %r for stat example in default greylist.conf
    - Support p0f v3.06 and up with --with-p0f-src or --enable-p0f306
    - DNS update support
    - "make clean" clears milter-greylist.spec
    - Add IPv6 support for MX sync


author: Joe Cooper <joe@virtualmin.com>
changelog:
  - Remove some deps...they've gone into the virtualmin-install.sh because of
    dep resolution troubles on some systems (RHEL and SUSE)


author: Joe Cooper <joe@virtualmin.com>
changelog:
  - Fix all the stupid bugs I introduced on the 10th
  - Add scponly to the Requires and add it to the /etc/shells file (TODO: chroot)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-48
changelog:
  - core: backport NoDecode option of AllowEncodedSlashes (#1002658)
  - mod_authz_host: disallow the '#' character in allow, deny (#1179911)
  - mod_ssl: fix memory leak on httpd reloads (#1236515)
  - mod_proxy: fix regression caused inherited workers to use a different
    scoreboard slot then the original one (#1252574)
  - mod_rewrite: allow running external mapping program as non-root (#1035230)
  - mod_reqtimeout: fix a timed out connection going into the keep-alive state
    after a timeout when discarding a request body (#1213967)
  - core: fix possible crash in SIGINT handling (#1233109)
  - mod_ssl: extend SSLSessionCacheTimeout to sessions resumed by TLS (#1190509)
  - initscript: do not print error when stopping stopped httpd (#1189941)
  - mod_ssl: fail for colons in credentials with FakeBasicAuth (#1027442)
  - mod_proxy: add "proxy-flushall" env variable which reduces the impact
    of caching 16K of the request body. (#952395)
  - mod_ssl: Do not send SSL warning when SNI hostname is not found as per
    RFC 6066 (#1289096)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-53
changelog:
  - core: fix possible long graceful restart caused by race condition between
    httpd children processes (#1301758)


author: Paul Howarth <paul@city-fan.org> 2.3.4-2
changelog:
  - Add fixes from upstream svn for a number of issues, most notably that the
    fixconf script had an error in the regexp, which resulted in a prefix of
    "FcgidFcgid" on the updated directives


author: Paul Howarth <paul@city-fan.org> 2.3.6-1
changelog:
  - Update to 2.3.6 (see CHANGES-FCGID for full details)
    - Fix possible stack buffer overwrite (CVE-2010-3872)
    - Change the default for FcgidMaxRequestLen from 1GB to 128K; administrators
      should change this to an appropriate value based on site requirements
    - Correct a problem that resulted in FcgidMaxProcesses being ignored in some
      situations
    - Return 500 instead of segfaulting when the application returns no output
  - Don't include SELinux policy for RHEL-5 builds since RHEL >= 5.5 includes it
  - Explicitly require /bin/sed for fixconf script


author: Paul Howarth <paul@city-fan.org> 2.3.6-2
changelog:
  - Add /etc/tmpfiles.d/mod_fcgid.conf for builds on Fedora 15 onwards to
    support running with /var/run on tmpfs (#656625)


author: Paul Howarth <paul@city-fan.org> 2.3.6-5
changelog:
  - Fix regression in 2.3.6 that broke process controls when using vhost-specific
    configuration (upstream issue 49902, #783742, CVE-2012-1181)


author: Paul Howarth <paul@city-fan.org> 2.3.6-6
changelog:
  - Fix compatibility with httpd 2.4 in F-18/RHEL-7 onwards
  - Use /run rather than /var/run from F-15/RHEL-7 onwards


author: Paul Howarth <paul@city-fan.org> 2.3.7-1
changelog:
  - Update to 2.3.7
    - Introduce FcgidWin32PreventOrphans directive on Windows to use OS Job
      Control Objects to terminate all running fcgi's when the worker process
      has been abruptly terminated (PR: 51078)
    - Periodically clean out the brigades that are pulling in the request body
      for handoff to the fcgid child (PR: 51749)
    - Resolve crash during graceful restarts (PR: 50309)
    - Solve latency/congestion of resolving effective user file access rights
      when no such info is desired, for config-related filename stats (PR: 51020)
    - Fix regression in 2.3.6 that broke process controls when using
      vhost-specific configuration
    - Account for first process in class in the spawn score
  - Drop patch for CVE-2012-1181, now included in upstream release


author: Joe Orton <jorton@redhat.com> - 2.2.15-1
changelog:
  - update to 2.2.15 (#570465, #570442)
  - fix version string (#572140)
  - mod_ssl: use ASN1_STRING_print() in SSLRequire's OID() (#552942)
  - prevent use of rsync during "make install" (#557049)
  - load mod_version by default in httpd.conf


author: Joe Orton <jorton@redhat.com> - 2.2.15-2
changelog:
  - init script fixes for LSB compliance (#546252)
   * exit code 2 for an unknown script argument
   * exit code 6 for a reload if config-test fails
   * exit code 7 for a reload on a stopped service
   * fixed help output to cover all options
  - mod_dav: handle PUT failure more cleanly (#572911)


author: Paul Howarth <paul@city-fan.org> - 0.41-3
changelog:
  - Rebuild for Berkeley DB 4.8.30 in F-13 and Rawhide (#592209)
  - Hard-code Berkeley DB requirement to avoid problems like #592209
  - Add %{?perl_default_filter}


author: Paul Howarth <paul@city-fan.org> - 0.42-1
changelog:
  - Update to 0.42
    - added $db->Env method to retrieve environment object from a database object
    - get the tied interface to use truncate in the CLEAR method if available
  - Build with libdb (Berkeley DB 5.x) from Fedora 14 onwards (#612139)
  - Tag BerkeleyDB.pod as %doc
  - Use DESTDIR rather than PERL_INSTALL_ROOT


author: Marcela Maslanova <mmaslano@redhat.com> - 0.43-1
changelog:
  - Update to 0.43
    - Changes to build with BDB 5.1
    - Dropped support for Server option when creating an environment
    - Documentation updates (CPAN RT#59202)
    - Fixed compilation error with MS Visual Studio 2005 (CPAN RT#59924)


author: Jim Radford <radford@blackbean.org> - 2.8.3-6
changelog:
  - set Socket in the conf file rather than the initscript to allow the
    user to change the default in the obvious place, but support it
    being set in in the sysconfig file or not set at all for backwards
    compatability with older config files.


author: Jim Radford <radford@blackbean.org> - 2.8.3-7
changelog:
  - Better support postfix by making the defailt UMask 002.
    This should by ok, as we run with our own user and group.


author: Paul Howarth <paul@city-fan.org> - 1.11-1
changelog:
  - Update to 1.11
    - Avoid warning while adding pipe (CPAN RT#16259, CPAN RT#60068)
    - Add EWOULDBLOCK and non-blocking mode for windows (CPAN RT#23982)
    - Fix typo in documentation (CPAN RT#21085)
    - Avoid shutdown after close (CPAN RT#5885, CPAN RT#5715)
    - Use length of outbuf, not exists to see if it is empty
    - Turn "use warnings" on
  - This release by MARKOV -> update source URL
  - Use %{_fixperms} rather than our own chmod incantation
  - Tidy up %summary and %description


author: Paul Howarth <paul@city-fan.org> - 1.13-1
changelog:
  - Update to 1.13
    - Fix handling of outbuf that contains '0' (CPAN RT#67458)
  - Nobody else likes macros for commands


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-47.1
changelog:
  - mod_proxy: fix regression caused inherited workers to use a different
    scoreboard slot then the original one (#1252574)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-47.4
changelog:
  - core: fix possible long graceful restart caused by race condition between
    httpd children processes (#1304712)


author: Joe Cooper <joe@virtualmin.com>
changelog:
  - Remove legacy cruft for dealing with old yum and up2date
  - Remove key importation of system keys...this is probably understood by users today, where it used to confuse and alarm users during install.


author: Paul Howarth <paul@city-fan.org> 2.2-11
changelog:
  - Follow link /etc/httpd/run and make our "run" directory a subdir of wherever
    that leads (#501123)


author: Paul Howarth <paul@city-fan.org> 2.2-12
changelog:
  - Don't use /etc/httpd/run as basis of "run" directory as its DAC permissions
    are not permissive enough in F-11 onwards; instead, revert to
    /var/run/mod_fcgid and tweak default config accordingly (#502273)


author: Paul Howarth <paul@city-fan.org> 2.3.1-1.20090923svn817978
changelog:
  - Update to post-2.3.1 svn snapshot
  - Upstream moved to apache.org
  - License changed to ASL 2.0
  - Use FCGID-prefixed config file options (old ones deprecated)
  - Lots of documentation changes
  - Renumber sources
  - Don't defer to mod_fastcgi if both are present
  - Drop gawk buildreq
  - Add patches fixing RPM build issues (DESTDIR support, header detection)


author: Paul Howarth <paul@city-fan.org> 2.3.1-2.20090925svn818270
changelog:
  - Update to svn revision 818270
  - DESTDIR and header detection patches upstreamed
  - Build SELinux policy module for EL-5; support in EL-5.3 is incomplete and
    will be fixed in EL-5.5 (#519369)
  - Drop aliases httpd_sys_content_r{a,o,w}_t -> httpd_fastcgi_content_r{a,o,w}_t
    from pre-2.5 SElinux policy module as these types aren't defined there


author: Paul Howarth <paul@city-fan.org> 2.3.4-1
changelog:
  - Update to 2.3.4 (configuration directives changed again)
  - Add fixconf.sed script for config file directives update


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 4.6-4
changelog:
  - --enable-chrooted-binary creates a binary that will operate in a chroot
    environment.  It does not manage creation and updating of a chroot jail.
    This is the user's responsibility.
  - Patch the Makefile.in to support install as a non-root user.


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 4.6-5
changelog:
  - Add BR: openssh-server so sftp-server is present.
  - Make source files nonexecutable so they are nonexecutable in debuginfo.
  - Mark the scponly configuration files as %config.


author: Tomas Hoger <thoger@redhat.com> - 4.6-10
changelog:
  - Add patch to prevent restriction bypass using OpenSSH's scp options -F
    and -o (CVE-2007-6415, #426072)


author: Chris Weyl <cweyl@alumni.drew.edu> 1:2.27-1
changelog:
  - update by Fedora::App::MaintainerTools 0.004
  - PERL_INSTALL_ROOT => DESTDIR
  - added a new br on perl(common::sense) (version 0)
  - added a new req on perl(common::sense) (version 0)


