/[gentoo-x86]/www-servers/thttpd/ChangeLog
Gentoo

Contents of /www-servers/thttpd/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.58 - (hide annotations) (download)
Tue Feb 26 20:04:32 2013 UTC (21 months, 3 weeks ago) by blueness
Branch: MAIN
Changes since 1.57: +7 -1 lines
Make log read/write by thttpd user only, bug #458896, CVE-2013-0348

(Portage version: 2.1.11.50/cvs/Linux x86_64, signed Manifest commit with key 0xF52D4BBA)

1 swegener 1.2 # ChangeLog for www-servers/thttpd
2 zmedico 1.57 # Copyright 1999-2013 Gentoo Foundation; Distributed under the GPL v2
3 blueness 1.58 # $Header: /var/cvsroot/gentoo-x86/www-servers/thttpd/ChangeLog,v 1.57 2013/02/25 21:27:58 zmedico Exp $
4    
5     *thttpd-2.26.4-r2 (26 Feb 2013)
6    
7     26 Feb 2013; Anthony G. Basile <blueness@gentoo.org>
8     +files/thttpd-fix-world-readable-log.patch, +thttpd-2.26.4-r2.ebuild:
9     Make log read/write by thttpd user only, bug #458896, CVE-2013-0348
10 zmedico 1.57
11     25 Feb 2013; Zac Medico <zmedico@gentoo.org> thttpd-2.26.4-r1.ebuild:
12     Add ~arm-linux keyword.
13 blueness 1.56
14     29 Dec 2012; Anthony G. Basile <blueness@gentoo.org> -files/thttpd.confd,
15     -files/thttpd.init:
16     Further cleanup
17 blueness 1.55
18     29 Dec 2012; Anthony G. Basile <blueness@gentoo.org>
19     -files/thttpd-2.25/additional-input-validation-httpd.c.diff,
20     -files/thttpd-2.25/fix-buffer-overflow.diff,
21     -files/thttpd-2.25/fix-insecure-tmp-creation-CVE-2005-3124.diff,
22     -files/thttpd-2.25/thttpd.conf.sample, -files/thttpd-2.25/thttpd.confd,
23     -files/thttpd-2.25/thttpd.init, -files/thttpd-2.25b-glibc-2.10.patch,
24     -thttpd-2.25b-r7.ebuild, -thttpd-2.26.2.ebuild:
25     Cleanup older versions
26 ago 1.54
27     29 Dec 2012; Agostino Sarubbo <ago@gentoo.org> thttpd-2.26.4-r1.ebuild:
28     Stable for sparc, wrt bug #441548
29 blueness 1.53
30     22 Nov 2012; Anthony G. Basile <blueness@gentoo.org> thttpd-2.26.4-r1.ebuild:
31     Move chown/chmod to src_install, where they belong, bug #444183
32 ago 1.52
33     21 Nov 2012; Agostino Sarubbo <ago@gentoo.org> thttpd-2.26.4-r1.ebuild:
34     Stable for x86, wrt bug #441548
35 ago 1.51
36     06 Nov 2012; <ago@gentoo.org> thttpd-2.26.4-r1.ebuild:
37     Stable for amd64, wrt bug #441548
38 blueness 1.50
39     03 Nov 2012; Anthony G. Basile <blueness@gentoo.org> thttpd-2.26.4-r1.ebuild:
40     stable arm, bug #441548
41 blueness 1.49
42     03 Nov 2012; Anthony G. Basile <blueness@gentoo.org> thttpd-2.26.4-r1.ebuild:
43     stable ppc ppc64, bug #441548
44 armin76 1.48
45     19 Aug 2012; Raúl Porcel <armin76@gentoo.org> thttpd-2.26.2.ebuild,
46     thttpd-2.26.4-r1.ebuild:
47     Re-add ~sparc wrt #422445
48 blueness 1.47
49     08 Aug 2012; Anthony G. Basile <blueness@gentoo.org> thttpd-2.26.4-r1.ebuild,
50     files/thttpd.conf.sample, files/thttpd.confd, files/thttpd.confd.1:
51     Fix THTTPD_DOCROOT
52 blueness 1.46
53     *thttpd-2.26.4-r1 (05 Aug 2012)
54    
55     05 Aug 2012; Anthony G. Basile <blueness@gentoo.org> -thttpd-2.26.4.ebuild,
56     +thttpd-2.26.4-r1.ebuild:
57 blueness 1.47 Move htdocs to docdir, bug #429632
58 blueness 1.45
59     *thttpd-2.26.4 (13 Jul 2012)
60    
61     13 Jul 2012; Anthony G. Basile <blueness@gentoo.org> +thttpd-2.26.4.ebuild,
62     +files/thttpd.confd.1, +files/thttpd.init.1:
63     Version bump, multi-instance enhancement, bug #424826
64 blueness 1.44
65     13 Jul 2012; Anthony G. Basile <blueness@gentoo.org> thttpd-2.26.2.ebuild:
66     Keyword ~arm ~ppc ~ppc64
67 blueness 1.43
68     11 Jul 2012; Anthony G. Basile <blueness@gentoo.org> thttpd-2.25b-r7.ebuild,
69     thttpd-2.26.2.ebuild:
70     Add GPL-2 for init scripts, bug #426182
71 jer 1.42
72     27 Jun 2012; Jeroen Roovers <jer@gentoo.org> thttpd-2.26.2.ebuild:
73     Marked ~hppa (bug #422445).
74 jdhore 1.41
75     20 Jun 2012; Jeff Horelick <jdhore@gentoo.org> thttpd-2.26.2.ebuild:
76     marked x86 per bug 422247
77 ago 1.40
78     19 Jun 2012; Agostino Sarubbo <ago@gentoo.org> thttpd-2.26.2.ebuild:
79     Stable for amd64, wrt bug #422247
80 blueness 1.39
81     19 Jun 2012; Anthony G. Basile <blueness@gentoo.org> thttpd-2.26.2.ebuild:
82     Keyword ~mips
83 zmedico 1.38
84     14 Apr 2012; Zac Medico <zmedico@gentoo.org> thttpd-2.26.2.ebuild:
85     Fix for prefix and add ~amd64-linux and ~x86-linux keywords.
86 blueness 1.37
87     04 Apr 2012; Anthony G. Basile <blueness@gentoo.org> -thttpd-2.25b-r8.ebuild,
88     -thttpd-2.25b-r9.ebuild,
89     -files/thttpd-2.25b-additional-input-validation.patch,
90     -files/thttpd-2.25b-default-to-octet-stream.patch,
91     -files/thttpd-2.25b-fix-buffer-overflow.patch,
92     -files/thttpd-2.25b-fix-illegal-path-info.patch,
93     -files/thttpd-2.25b-fix-insecure-tmp-creation.patch,
94     -files/thttpd-2.25b-monolithic-timer.patch,
95     -files/thttpd-2.25b-ogg-mime-type.patch,
96     -files/thttpd-2.25b-respect-CFLAGS--dont-link-static.patch,
97     -files/thttpd-2.25b-use-Status-header.patch,
98     -files/thttpd-2.25b-use-X-Forwarded-For-header.patch,
99     files/thttpd.conf.sample, files/thttpd.confd:
100     Remove older ebuilds and patches migrated into forked code
101 blueness 1.36
102     *thttpd-2.26.2 (04 Apr 2012)
103    
104     04 Apr 2012; Anthony G. Basile <blueness@gentoo.org> +thttpd-2.26.2.ebuild:
105     Version bump after I forked the code
106 blueness 1.35
107     *thttpd-2.25b-r9 (24 Mar 2012)
108    
109     24 Mar 2012; Anthony G. Basile <blueness@gentoo.org> +thttpd-2.25b-r9.ebuild,
110     +files/thttpd-2.25b-additional-input-validation.patch,
111     +files/thttpd-2.25b-default-to-octet-stream.patch,
112     +files/thttpd-2.25b-fix-buffer-overflow.patch,
113     +files/thttpd-2.25b-fix-insecure-tmp-creation.patch,
114     +files/thttpd-2.25b-ogg-mime-type.patch, +files/thttpd.conf.sample,
115     +files/thttpd.confd, +files/thttpd.init:
116     Address bugs #370373, #373629, #373631, #406243. Clean up init scripts.
117 blueness 1.34
118     21 Mar 2012; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
119     Will give it love, added myself as maintainer
120 pacho 1.33
121     21 Mar 2012; Pacho Ramos <pacho@gentoo.org> metadata.xml:
122     Drop www-server herd as discussed in gentoo-dev ML.
123 zmedico 1.32
124     03 Aug 2011; Zac Medico <zmedico@gentoo.org> thttpd-2.25b-r8.ebuild:
125     Fix for prefix.
126 bangert 1.31
127     *thttpd-2.25b-r8 (28 Oct 2010)
128    
129     28 Oct 2010; Thilo Bangert <bangert@gentoo.org> +thttpd-2.25b-r8.ebuild,
130     +files/thttpd-2.25b-fix-illegal-path-info.patch,
131     +files/thttpd-2.25b-monolithic-timer.patch,
132     +files/thttpd-2.25b-respect-CFLAGS--dont-link-static.patch,
133     +files/thttpd-2.25b-use-Status-header.patch,
134     +files/thttpd-2.25b-use-X-Forwarded-For-header.patch:
135     Bump. EAPI=3, dont freeze when time goes backwards (#327615), dont link
136     statically by default (#273319), respect CFLAGS (#241464), fix illegal
137     PATH_INFO, use Status on all Location headers, use IP from
138     X-Forwarded-For (all #331747).
139 ssuominen 1.30
140     09 Aug 2009; Samuli Suominen <ssuominen@gentoo.org>
141     thttpd-2.25b-r7.ebuild, +files/thttpd-2.25b-glibc-2.10.patch:
142     Fix building with GLIBC 2.10+ wrt #274049.
143 bangert 1.29
144     26 Jun 2008; Thilo Bangert <bangert@gentoo.org> -thttpd-2.25b-r6.ebuild,
145     thttpd-2.25b-r7.ebuild:
146     remove bindnow-flags - as per bug #227029 - remove ancient version - fix
147     quoting
148 bangert 1.28
149     30 Jan 2008; Thilo Bangert <bangert@gentoo.org> -thttpd-2.25b-r5.ebuild:
150     remove vulnerable version - bug #159941
151 fmccor 1.27
152     01 Oct 2007; Ferris McCormick <fmccor@gentoo.org> thttpd-2.25b-r7.ebuild:
153     Sparc stable -- Bug #194419 -- thanks to Aaron Mavrinac.
154 dertobi123 1.26
155     13 Aug 2007; Tobias Scherbaum <dertobi123@gentoo.org>
156     thttpd-2.25b-r7.ebuild:
157     ppc. stable
158 armin76 1.25
159     04 Jul 2007; Raúl Porcel <armin76@gentoo.org> thttpd-2.25b-r7.ebuild:
160     x86 stable
161 welp 1.24
162     09 Apr 2007; Peter Weller <welp@gentoo.org> thttpd-2.25b-r7.ebuild:
163     Stable on amd64
164 gustavoz 1.23
165     12 Mar 2007; Gustavo Zacarias <gustavoz@gentoo.org>
166     thttpd-2.25b-r6.ebuild:
167     Stable on sparc
168 bangert 1.22
169     *thttpd-2.25b-r7 (28 Feb 2007)
170    
171     28 Feb 2007; Thilo Bangert <bangert@gentoo.org>
172     +files/thttpd-2.25/additional-input-validation-httpd.c.diff,
173     +files/thttpd.logrotate, +thttpd-2.25b-r7.ebuild:
174     add logrotate script (bug #150993)
175     run under thttpd user instead of nobody (bug #151227)
176     extra input sanitation for htpasswd (bug #128165)
177     einfo -> elog
178 gustavoz 1.21
179     02 Feb 2007; Gustavo Zacarias <gustavoz@gentoo.org>
180     thttpd-2.25b-r6.ebuild:
181     Keyworded ~sparc wrt #164911
182 eroyf 1.20
183     20 Jan 2007; Alexander H. Færøy <eroyf@gentoo.org>
184     thttpd-2.25b-r6.ebuild:
185     marked ~mips; bug #150227
186 opfer 1.19
187     10 Jan 2007; Christian Faulhammer <opfer@gentoo.org>
188     thttpd-2.25b-r6.ebuild:
189     stable x86, security bug #159941
190 dertobi123 1.18
191     09 Jan 2007; Tobias Scherbaum <dertobi123@gentoo.org>
192     thttpd-2.25b-r6.ebuild:
193     Stable on ppc wrt bug #159941.
194 beu 1.17
195     *thttpd-2.25b-r6 (08 Jan 2007)
196    
197     08 Jan 2007; Elfyn McBratney <beu@gentoo.org>
198     +files/thttpd-2.25/fix-buffer-overflow.diff, +thttpd-2.25b-r6.ebuild:
199     Rev bump for security bug #159941.
200 drizzt 1.16
201     08 Oct 2006; Timothy Redaelli <drizzt@gentoo.org> thttpd-2.25b-r5.ebuild:
202     Added ~x86-fbsd keyword.
203 dsd 1.15
204     *thttpd-2.25b-r5 (06 Sep 2006)
205    
206     06 Sep 2006; Daniel Drake <dsd@gentoo.org> files/thttpd-2.25/thttpd.init,
207     -thttpd-2.25b-r4.ebuild, +thttpd-2.25b-r5.ebuild:
208     Fix init script to change into configured directory before starting,
209     reported by Laurence Withers in bug #142047
210 genstef 1.14
211     05 Jul 2006; Stefan Schweizer <genstef@gentoo.org>
212     -files/php5.0-stdint.diff,
213     -files/thttpd-2.25/php-5.0.3-thttpd-2.25b.patch,
214     -files/php5_soap_persistence_session.diff, -files/php-5.0.3-IOV.patch,
215     -files/php-5.0.3-missing-arches.patch, -thttpd-2.25b.ebuild,
216     -thttpd-2.25b-r1.ebuild, -thttpd-2.25b-r2.ebuild, -thttpd-2.25b-r3.ebuild:
217     remove old versions that use the obsolete php5-sapi-r2 eclass and thus xml2
218     IUSE, bug 116346
219 metalgod 1.13
220     01 Jan 2006; Luis Medinas <metalgod@gentoo.org> thttpd-2.25b-r4.ebuild:
221     Added ~amd64 keyword.
222 flameeyes 1.12
223     25 Dec 2005; Diego Pettenò <flameeyes@gentoo.org> thttpd-2.25b-r4.ebuild:
224     Use bindnow-flags function instead of -Wl,-z,now.
225 jer 1.11
226     29 Nov 2005; Jeroen Roovers <jer@gentoo.org> thttpd-2.25b-r4.ebuild:
227     Marked ~hppa wrt bug 109189.
228 josejx 1.10
229     16 Nov 2005; Joseph Jezak <josejx@gentoo.org> thttpd-2.25b-r4.ebuild:
230     Marked ppc stable for bug #110637.
231 ka0ttic 1.9
232     *thttpd-2.25b-r4 (15 Nov 2005)
233    
234     15 Nov 2005; Aaron Walker <ka0ttic@gentoo.org> +thttpd-2.25b-r4.ebuild:
235     Revision bump; removed php support so we can go stable for security bug 110637.
236 ka0ttic 1.8
237     *thttpd-2.25b-r3 (28 Oct 2005)
238    
239     28 Oct 2005; Aaron Walker <ka0ttic@gentoo.org>
240     +files/thttpd-2.25/fix-insecure-tmp-creation-CVE-2005-3124.diff,
241     +thttpd-2.25b-r3.ebuild:
242     Revision bump; added patch to fix insecure tmp file creation in the
243     syslogtocern script, bug #110637.
244 hansmi 1.7
245     17 May 2005; Michael Hanselmann <hansmi@gentoo.org> thttpd-2.25b.ebuild:
246     Stable on ppc.
247 stuart 1.6
248     *thttpd-2.25b-r2 (27 Mar 2005)
249    
250     27 Mar 2005; Stuart Herbert <stuart@gentoo.org> +files/php-5.0.3-IOV.patch,
251     +files/php-5.0.3-missing-arches.patch, +files/php5.0-stdint.diff,
252     +files/php5_soap_persistence_session.diff,
253     +files/thttpd-2.25/php-5.0.3-thttpd-2.25b.patch, +thttpd-2.25b-r2.ebuild:
254     Added php support (requested by Solar)
255 ka0ttic 1.5
256     *thttpd-2.25b-r1 (08 Mar 2005)
257    
258     08 Mar 2005; Aaron Walker <ka0ttic@gentoo.org> +thttpd-2.25b-r1.ebuild:
259     Revision bump; added static support via USE=static for bug 84485.
260 ka0ttic 1.4
261     *thttpd-2.25b (09 Feb 2005)
262    
263     09 Feb 2005; Aaron Walker <ka0ttic@gentoo.org> -thttpd-2.25.ebuild,
264     +thttpd-2.25b.ebuild:
265     Fix versioning (b is part of PV). Also fixed setXid QA notice for makeweb
266     executable. Marked stable on x86.
267 rl03 1.3
268     08 Sep 2004; Renat Lumpau <rl03@gentoo.org> metadata.xml:
269     Fixed herd name
270 swegener 1.2
271     05 Sep 2004; Sven Wegener <swegener@gentoo.org> :
272     Fixed ChangeLog header.
273 stuart 1.1
274     *thttpd-2.25 (08 Aug 2004)
275    
276     08 Aug 2004; Stuart Herbert <stuart@gentoo.org> +metadata.xml,
277     +files/thttpd-2.25/thttpd.conf.sample, +files/thttpd-2.25/thttpd.confd,
278     +files/thttpd-2.25/thttpd.init, +thttpd-2.25.ebuild:
279     Moved from net-www/thttpd to www-servers/thttpd.
280    
281     01 Jul 2004; Jeremy Huddleston <eradicator@gentoo.org> thttpd-2.25.ebuild:
282     virtual/glibc -> virtual/libc
283    
284     27 Jun 2004; Aron Griffis <agriffis@gentoo.org> thttpd-2.25.ebuild:
285     QA - fix use invocation
286    
287     25 Apr 2004; David Holm <dholm@gentoo.org> thttpd-2.25.ebuild:
288     Added to ~ppc.
289    
290     *thttpd-2.25 (23 Apr 2004)
291    
292     23 Apr 2004; Stuart Herbert <stuart@gentoo.org>
293     files/thttpd-2.25/thttpd.conf.sample, files/thttpd-2.25/thttpd.confd,
294     files/thttpd-2.25/thttpd.init:
295     Initial import; thanks to Thomas Eckert <eckert.thomas@gmx.net> in bug #36173

  ViewVC Help
Powered by ViewVC 1.1.20