# # ChangeLog for trunk/server/common/patches # # Generated by Trac 1.0.2 # Mar 28, 2024, 6:41:31 AM Fri, 01 Jul 2011 14:58:38 GMT geofft [1922] * trunk/server/common/patches/curl-gssapi-delegation.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/curl.spec.patch (added) Patch curl for CVE-2011-2192: do not delegate tickets over HTTP Tue, 07 Jun 2011 16:23:31 GMT geofft [1877] * trunk/server/common/oursrc/execsys/mime.types (modified) * trunk/server/common/oursrc/execsys/upd-execsys (modified) * trunk/server/common/oursrc/scripts-static-cat/StaticCat.hs (modified) * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) static-cat: Add all MS Office (including OOXML) and ODF types Wed, 27 Apr 2011 08:30:35 GMT mitchb [1815] * trunk/server/common/patches/389-ds-base-fix-changelog-paths.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/389-ds-base.spec.patch (deleted) * trunk/server/fedora/specs/scripts-base.spec (modified) Stop scriptsifying 389-ds-base The changelog logic correction is in ... Sun, 27 Feb 2011 08:58:45 GMT geofft [1785] * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) suexec also needs to know about filetypes: add ttf and otf Thu, 09 Dec 2010 08:12:52 GMT mitchb [1751] * trunk/server/common/patches/389-ds-base-fix-changelog-paths.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/389-ds-base.spec.patch (added) Fix changelogdb path logic in 389-ds-base Sat, 27 Nov 2010 01:13:23 GMT mitchb [1743] * trunk/server/common/patches/389-sasl-io-4-bytes.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/389-ds-base.spec.patch (deleted) Stop scriptsifying 389-ds-base This patch is now in Fedora's ... Mon, 22 Nov 2010 10:00:56 GMT mitchb [1740] * trunk/server/common/patches/ipython-do-not-require-gtk.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/ipython.spec.patch (deleted) Stop scriptsifying ipython This fix is now in Fedora's ... Sun, 21 Nov 2010 02:15:16 GMT mitchb [1739] * trunk/server/common/patches/openssh-no-spurious-correct-key-incorrect-host-messages.patch (added) * trunk/server/fedora/specs/openssh.spec.patch (modified) Eliminate spurious opsnssh error messages related to public keys If ... Sat, 13 Nov 2010 15:17:38 GMT ezyang [1726] * trunk/server/common/patches/ipython-do-not-require-gtk.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/ipython.spec.patch (added) Scriptsify ipython, add patch for GTK. Wed, 27 Oct 2010 07:14:17 GMT geofft [1706] * trunk/server/common/patches/389-sasl-io-4-bytes.patch (modified) Backport harder Wed, 27 Oct 2010 06:53:43 GMT geofft [1705] * trunk/server/common/patches/389-sasl-io-4-bytes.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/389-ds-base.spec.patch (added) Scriptsify 389 to grab fix for RHBZ #637852 Sat, 23 Oct 2010 12:07:08 GMT ezyang [1693] * trunk (modified) * trunk/locker/bin (modified) * trunk/locker/bin/scripts-remove (modified) * trunk/locker/bin/signup-minimal (modified) * trunk/locker/bin/signup-sql (modified) * trunk/locker/deploy/bin (modified) * trunk/locker/deploy/bin/onathena (modified) * trunk/locker/deploy/bin/rails (modified) * trunk/locker/deploy/bin/trac (modified) * trunk/locker/deploy/bin/turbogears (modified) * trunk/locker/sql/bin/save-password (modified) * trunk/server/common/oursrc/accountadm (modified) * trunk/server/common/oursrc/accountadm/Makefile.in (modified) * trunk/server/common/oursrc/accountadm/admof.c (modified) * trunk/server/common/oursrc/athrun (modified) * trunk/server/common/oursrc/execsys (modified) * trunk/server/common/oursrc/execsys/execsys-binfmt (modified) * trunk/server/common/oursrc/httpdmods (modified) * trunk/server/common/oursrc/logview (modified) * trunk/server/common/oursrc/php_scripts/php_scripts-config.m4 (modified) * trunk/server/common/oursrc/tokensys (modified) * trunk/server/common/oursrc/whoisd (modified) * trunk/server/common/patches/ghostscript-CVE-2010-1628.patch (deleted) * trunk/server/common/patches/krb5-kuserok-scripts.patch (modified) * trunk/server/common/patches/openafs-release-glock.patch (deleted) * trunk/server/common/patches/openafs-scripts.patch (modified) * trunk/server/common/patches/openssh-4.5p1-multihomed.patch (deleted) * trunk/server/common/patches/openssh-5.0p1-multihomed.patch (deleted) * trunk/server/doc/389-ds-enable-ssl-and-kerberos.diff (deleted) * trunk/server/doc/HOWTO-SETUP-LDAP (deleted) * trunk/server/doc/install-fedora (modified) * trunk/server/doc/install-howto.sh (modified) * trunk/server/doc/install-ldap (copied) * trunk/server/doc/install-xen (modified) * trunk/server/doc/install-xvm (copied) * trunk/server/doc/kernel-build-howto (modified) * trunk/server/doc/ldap-kerberos-replication.txt (copied) * trunk/server/doc/package-build-howto (modified) * trunk/server/doc/upgrade-tips (copied) * trunk/server/fedora (modified) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/config/etc (modified) * trunk/server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified) * trunk/server/fedora/config/etc/postfix/main.cf (modified) * trunk/server/fedora/config/etc/ssh/sshd_config (modified) * trunk/server/fedora/config/etc/sysconfig/openafs (modified) * trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) * trunk/server/fedora/config/etc/yum.repos.d/scripts.repo (modified) * trunk/server/fedora/specs/ghc-MonadCatchIO-mtl.spec (modified) * trunk/server/fedora/specs/ghc-cgi.spec (modified) * trunk/server/fedora/specs/ghc-unix-handle.spec (modified) * trunk/server/fedora/specs/ghostscript.spec.patch (deleted) * trunk/server/fedora/specs/httpd.spec.patch (modified) * trunk/server/fedora/specs/krb5.spec.patch (modified) * trunk/server/fedora/specs/libpng.spec.patch (deleted) * trunk/server/fedora/specs/mit-zephyr.spec.patch (deleted) * trunk/server/fedora/specs/openafs.spec.patch (modified) * trunk/server/fedora/specs/openssh.spec.patch (modified) * trunk/server/fedora/specs/python-zephyr.spec (copied) * trunk/server/fedora/specs/scripts-base.spec (modified) * trunk/server/fedora/specs/scripts-static-cat.spec (modified) * trunk/server/fedora/specs/shadow-utils.spec.patch (deleted) * trunk/server/fedora/specs/zephyr.spec (copied) * trunk/server/fedora/specs/zhm.init (copied) Merge Fedora 13 development back to trunk. Thu, 26 Aug 2010 19:14:03 GMT gdb [1602] * trunk/server/common/patches/httpd-fixup-vhost.patch (added) * trunk/server/fedora/specs/httpd.spec.patch (modified) httpd: Add method to merge virtual host with a main server_rec Sun, 18 Jul 2010 23:02:40 GMT andersk [1590] * trunk/server/common/oursrc/scripts-static-cat (added) * trunk/server/common/oursrc/scripts-static-cat/Setup.hs (added) * trunk/server/common/oursrc/scripts-static-cat/StaticCat.hs (added) * trunk/server/common/oursrc/scripts-static-cat/scripts-static-cat.cabal (added) * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/ghc-MonadCatchIO-mtl.spec (added) * trunk/server/fedora/specs/ghc-cgi.spec (added) * trunk/server/fedora/specs/ghc-unix-handle.spec (added) * trunk/server/fedora/specs/scripts-static-cat.spec (added) Package new static-cat written in Haskell. This adds support for ... Fri, 16 Jul 2010 06:43:10 GMT geofft [1587] * trunk/server/common/patches/ghostscript-CVE-2010-1628.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/ghostscript.spec.patch (added) Patch Ghostscript overflow error, see GS bug #691295 (CVE-2010-1628) Wed, 19 May 2010 07:02:32 GMT adehnert [1561] * trunk/server/common/patches/texlive-CVE-2010-1440.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/texlive.spec.patch (deleted) Revert "Patch for CVE-2010-1440 (and CVE-2010-0739)" This reverts ... Wed, 19 May 2010 07:02:29 GMT adehnert [1560] * trunk/server/common/patches/dvipng-CVE-2010-0829.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/dvipng.spec.patch (deleted) Revert "Patch for CVE-2010-0829... SSDP: Same Thing, Different ... Fri, 07 May 2010 07:48:20 GMT mitchb [1559] * trunk/server/common/patches/dvipng-CVE-2010-0829.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/dvipng.spec.patch (added) Patch for CVE-2010-0829... SSDP: Same Thing, Different Package Fri, 07 May 2010 05:44:58 GMT adehnert [1557] * trunk/server/common/patches/texlive-CVE-2010-1440.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/texlive.spec.patch (added) Patch for CVE-2010-1440 (and CVE-2010-0739) Both are crashes or ... Wed, 05 May 2010 05:06:27 GMT mitchb [1555] * trunk/server/common/patches/openafs-release-glock.patch (added) * trunk/server/fedora/specs/openafs.spec.patch (modified) There can be only one! (so stop hogging the GLOCK) OpenAFS 1.4.12 ... Fri, 16 Apr 2010 09:21:37 GMT mitchb [1539] * trunk/server/common/patches/httpd-2.2.x-CVE-2010-0434.patch (deleted) * trunk/server/common/patches/httpd-2.2.x-mod_ssl-sessioncaching.patch (modified) * trunk/server/fedora/specs/httpd.spec.patch (modified) Upgrade to Apache 2.2.15 Also drop the CVE-2010-0434 patch which is ... Fri, 12 Mar 2010 09:13:12 GMT andersk [1509] * trunk/server/common/patches/openafs-scripts.patch (modified) Return real error codes from unauthorized PGetTokens, PSetTokens, ... Thu, 11 Mar 2010 11:29:29 GMT mitchb [1505] * trunk/server/common/patches/httpd-2.2.x-CVE-2010-0434.patch (added) * trunk/server/fedora/specs/httpd.spec.patch (modified) CVE-2010-0434: Putting the "Patch" in "Apache" since... well, 2010 Thu, 25 Feb 2010 08:10:38 GMT mitchb [1490] * trunk/server/common/patches/moira-install-headers.patch (deleted) * trunk/server/fedora/specs/moira.spec (modified) New moira packages Fri, 19 Feb 2010 21:18:13 GMT ezyang [1474] * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) Specify uid 102 is signup, and remove dead SELinux code. Fri, 12 Feb 2010 08:52:35 GMT mitchb [1464] * trunk/server/common/oursrc/execsys/mime.types (modified) * trunk/server/common/oursrc/execsys/static-cat.c.pre (modified) * trunk/server/common/oursrc/execsys/upd-execsys (modified) * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) What's that? I can't hear you over the static! o Make Apache, ... Mon, 01 Feb 2010 07:45:54 GMT mitchb [1453] * trunk/server/common/patches/gzip-cve-2009-2624.patch (deleted) * trunk/server/common/patches/gzip-cve-2010-0001.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/gzip.spec.patch (deleted) Stop scriptsifying gzip Fedora has released a package with the ... Thu, 21 Jan 2010 13:04:20 GMT mitchb [1433] * trunk/server/common/patches/gzip-cve-2009-2624.patch (added) * trunk/server/common/patches/gzip-cve-2010-0001.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/gzip.spec.patch (added) Scriptsify gzip to patch for CVE-2009-2624 and CVE-2010-0001 Wed, 06 Jan 2010 05:47:05 GMT mitchb [1406] * trunk/server/common/patches/moira-fix-manpage-paths.patch (added) * trunk/server/common/patches/moira-install-headers.patch (modified) * trunk/server/fedora/specs/moira.spec (modified) Play Evan on TV (update moira to new snapshot, provide shared ... Sun, 27 Dec 2009 09:01:12 GMT gdb [1396] * trunk/server/common/patches/moira-install-headers.patch (added) * trunk/server/common/patches/moira-update-server.rc.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/moira.spec (modified) Built and mildly tested moira RPM Sun, 27 Dec 2009 07:55:15 GMT mitchb [1395] * trunk/server/common/patches/rc.nslcd.patch (deleted) Remove nslcd initscript patch I neglected to punt this in r1294 when ... Fri, 20 Nov 2009 08:00:21 GMT mitchb [1360] * trunk/server/common/patches/php-scripts-304.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/php.spec.patch (deleted) * trunk/server/fedora/specs/scripts-base.spec (modified) Stop scriptsifying php; our patch for the-bug is r281116 in 5.2.11 ... Tue, 10 Nov 2009 04:14:34 GMT andersk [1356] * trunk/server/common/patches/httpd-suexec-cloexec.patch (added) * trunk/server/fedora/specs/httpd.spec.patch (modified) suexec: Fix error logging if execv failed. Patch from httpd trunk ... Tue, 10 Nov 2009 04:14:31 GMT andersk [1355] * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) suexec: Exec static-cat or php-cgi after closing the suexec log. Tue, 10 Nov 2009 04:14:29 GMT andersk [1354] * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) suexec: Log the correct path to PHP if execv failed. Signed-off-by: ... Sun, 08 Nov 2009 16:02:18 GMT mitchb [1348] * trunk/server/common/patches/httpd-2.2.x-mod_ssl-sessioncaching.patch (added) * trunk/server/fedora/specs/httpd.spec.patch (modified) Prompt for certs once, not five bajillion times (fix SSL session ... Thu, 15 Oct 2009 04:58:56 GMT mitchb [1340] * trunk/server/common/patches/rubygem-actionpack-2.3.x-CVE-2009-3009.patch (deleted) * trunk/server/common/patches/rubygem-activesupport-2.3.x-CVE-2009-3009.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/rubygem-actionpack.spec.patch (deleted) * trunk/server/fedora/specs/rubygem-activesupport.spec.patch (deleted) Revert r1329 - stop scriptsifying activesupport and actionpack gems ... Thu, 01 Oct 2009 11:44:32 GMT mitchb [1329] * trunk/server/common/patches/rubygem-actionpack-2.3.x-CVE-2009-3009.patch (added) * trunk/server/common/patches/rubygem-activesupport-2.3.x-CVE-2009-3009.patch (added) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/rubygem-actionpack.spec.patch (added) * trunk/server/fedora/specs/rubygem-activesupport.spec.patch (added) Scriptsify activesupport and actionpack ruby gems, patch for ... Tue, 25 Aug 2009 12:18:12 GMT mitchb [1306] * trunk/server/common/patches/httpd-2.2.x-sni.patch (deleted) * trunk/server/fedora/specs/httpd.spec.patch (modified) Upgrade Apache to 2.2.13; don't patch in SNI support anymore And we ... Thu, 16 Jul 2009 02:50:26 GMT mitchb [1274] * trunk/server/common/patches/openafs-delta-dprintf-rename-20090427.patch (deleted) * trunk/server/common/patches/openafs-delta-linux26-defer-cred-changing-20090511.patch (deleted) * trunk/server/common/patches/openafs-postinit.patch (deleted) * trunk/server/common/patches/openafs-pts-encrypt.patch (deleted) * trunk/server/common/patches/openafs-scripts.patch (modified) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/openafs.spec.patch (modified) Upgrade OpenAFS to 1.4.11 o Two of our patches (postinit and ... Thu, 09 Jul 2009 19:48:21 GMT mitchb [1259] * trunk (modified) * trunk/lvs/debian/config/etc/munin/plugins/cps_1_0 (modified) * trunk/server/common/patches/httpd-2.2.x-sni.patch (modified) * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) * trunk/server/common/patches/openafs-delta-dprintf-rename-20090427.patch (copied) * trunk/server/common/patches/openafs-delta-linux26-defer-cred-changing-20090511.patch (copied) * trunk/server/common/patches/openafs-numsysnames.patch (copied) * trunk/server/common/patches/openafs-scripts.patch (modified) * trunk/server/common/patches/openssh-4.7p1-gssapi-name-in-env.patch (copied) * trunk/server/doc/install-howto.sh (modified) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/config/etc/acpi (deleted) * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) * trunk/server/fedora/config/etc/logrotate.d/httpd (modified) * trunk/server/fedora/config/etc/munin/munin-node.conf (modified) * trunk/server/fedora/config/etc/munin/plugin-conf.d/munin-node (modified) * trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified) * trunk/server/fedora/config/etc/nscd.conf (modified) * trunk/server/fedora/config/etc/php.d/apc.ini (copied) * trunk/server/fedora/config/etc/php.d/curl.ini (copied) * trunk/server/fedora/config/etc/php.d/wddx.ini (copied) * trunk/server/fedora/config/etc/printcap (modified) * trunk/server/fedora/config/etc/security/limits.conf (modified) * trunk/server/fedora/config/etc/sudoers (modified) * trunk/server/fedora/config/etc/sysconfig/networking (copied) * trunk/server/fedora/config/etc/sysconfig/openafs (modified) * trunk/server/fedora/config/etc/syslog-ng/syslog-ng.conf (modified) * trunk/server/fedora/config/etc/yum (copied) * trunk/server/fedora/config/etc/yum.repos.d/fedora-updates-testing-newkey.repo (deleted) * trunk/server/fedora/config/etc/yum.repos.d/scripts.repo (modified) * trunk/server/fedora/specs/httpd.spec.patch (modified) * trunk/server/fedora/specs/krb5.spec.patch (modified) * trunk/server/fedora/specs/nss-ldapd.spec.patch (modified) * trunk/server/fedora/specs/openafs.spec.patch (modified) * trunk/server/fedora/specs/openssh.spec.patch (modified) * trunk/server/fedora/specs/php.spec.patch (modified) * trunk/server/fedora/specs/pysvn.spec.patch (deleted) * trunk/server/fedora/specs/scripts-base.spec (modified) Reintegrate branches/fc11-dev (r1121:1258) to trunk Fri, 05 Jun 2009 04:24:02 GMT geofft [1169] * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) suexec: Hardcode the JAVA_TOOL_OPTIONS value. Because, otherwise, ... Fri, 05 Jun 2009 02:47:14 GMT geofft [1167] * trunk/server/common/patches/httpd-suexec-scripts.patch (modified) suexec: Let the JAVA_TOOL_OPTIONS environment variable through. Wed, 27 May 2009 02:57:18 GMT ezyang [1134] * trunk/server/common/patches/openafs-scripts.patch (modified) Update OpenAFS patch to not need 777 for .htaccess files. Symlinks ... Sun, 10 May 2009 18:27:18 GMT mitchb [1119] * trunk (copied) Restructure so trunk of the repo is at /trunk, not / (part 1) Wed, 06 May 2009 08:19:41 GMT mitchb [1115] * server/common/patches/httpd-2.2.x-sni.patch (modified) In this week's episode of "As the Server Name Indicates..." ...