Hello community, here is the log from the commit of package apache2 for openSUSE:Factory checked in at 2018-10-29 14:14:39 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apache2 (Old) and /work/SRC/openSUSE:Factory/.apache2.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apache2" Mon Oct 29 14:14:39 2018 rev:150 rq:643962 version:2.4.37 Changes: -------- --- /work/SRC/openSUSE:Factory/apache2/apache2.changes 2018-10-04 19:00:15.423281154 +0200 +++ /work/SRC/openSUSE:Factory/.apache2.new/apache2.changes 2018-10-29 14:56:51.245716852 +0100 @@ -1,0 +2,50 @@ +Thu Oct 18 20:41:02 UTC 2018 - Manu Maier <[email protected]> + +- updated to 2.4.37 + * mod_ssl: Fix HTTP/2 failures when using OpenSSL 1.1.1. [Rainer Jung] + * mod_ssl: Fix crash during SSL renegotiation with OptRenegotiate set, + when client certificates are available from the original handshake + but were originally not verified and should get verified now. + This is a regression in 2.4.36 (unreleased). [Ruediger Pluem] + * mod_ssl: Correctly merge configurations that have client certificates set + by SSLProxyMachineCertificate{File|Path}. [Ruediger Pluem] +- updated to 2.4.36 + * mod_brotli, mod_deflate: Restore the separate handling of 304 Not Modified + responses. Regression introduced in 2.4.35. + * mod_proxy_scgi, mod_proxy_uwsgi: improve error handling when sending the + body of the response. [Jim Jagielski] + * mod_http2: adding defensive code for stream EOS handling, in case the request handler + missed to signal it the normal way (eos buckets). Addresses github issues + https://github.com/icing/mod_h2/issues/164, https://github.com/icing/mod_h2/issues/167 + and https://github.com/icing/mod_h2/issues/170. [Stefan Eissing] + * ab: Add client certificate support. [Graham Leggett] + * ab: Disable printing temp key for OpenSSL before + version 1.0.2. SSL_get_server_tmp_key is not available + there. [Rainer Jung] + * mod_ssl: Fix a regression that the configuration settings for verify mode + and verify depth were taken from the frontend connection in case of + connections by the proxy to the backend. PR 62769. [Ruediger Pluem] + * MPMs: Initialize all runtime/asynchronous objects on a dedicated pool and + before signals handling to avoid lifetime issues on restart or shutdown. + PR 62658. [Yann Ylavic] + * mod_ssl: Add support for OpenSSL 1.1.1 and TLSv1.3. TLSv1.3 has + behavioural changes compared to v1.2 and earlier; client and + configuration changes should be expected. SSLCipherSuite is + enhanced for TLSv1.3 ciphers, but applies at vhost level only. + [Stefan Eissing, Yann Ylavic, Ruediger Pluem, Joe Orton] + * mod_auth_basic: Be less tolerant when parsing the credencial. Only spaces + should be accepted after the authorization scheme. \t are also tolerated. + [Christophe Jaillet] + * mod_proxy_hcheck: Fix issues with interval determination. PR 62318 + [Jim Jagielski] + * mod_proxy_hcheck: Fix issues with TCP health checks. PR 61499 + [Dominik Stillhard <dominik.stillhard united-security-providers.ch>] + * mod_proxy_hcheck: take balancer's SSLProxy* directives into account. + [Jim Jagielski] + * mod_status, mod_echo: Fix the display of client addresses. + They were truncated to 31 characters which is not enough for IPv6 addresses. + This is done by deprecating the use of the 'client' field and using + the new 'client64' field in worker_score. + PR 54848 [Bernhard Schmidt <berni birkenwald de>, Jim Jagielski] + +------------------------------------------------------------------- Old: ---- httpd-2.4.35.tar.bz2 httpd-2.4.35.tar.bz2.asc New: ---- httpd-2.4.37.tar.bz2 httpd-2.4.37.tar.bz2.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apache2.spec ++++++ --- /var/tmp/diff_new_pack.uBStzm/_old 2018-10-29 14:56:52.605721902 +0100 +++ /var/tmp/diff_new_pack.uBStzm/_new 2018-10-29 14:56:52.613721932 +0100 @@ -65,7 +65,7 @@ %define build_http2 0 %endif Name: apache2 -Version: 2.4.35 +Version: 2.4.37 Release: 0 Summary: The Apache Web Server Version 2.4 License: Apache-2.0 ++++++ httpd-2.4.35.tar.bz2 -> httpd-2.4.37.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/apache2/httpd-2.4.35.tar.bz2 /work/SRC/openSUSE:Factory/.apache2.new/httpd-2.4.37.tar.bz2 differ: char 11, line 1
