ChangeLog
2007/09/14 - Apache 1.3.37 -> 1.3.39
- mod_ssl 2.8.28 -> 2.8.30
2007/06/04 - php 4.4.6 -> 4.4.7
2007/04/03 - php 4.4.4 -> 4.4.6
- auth_ldap 1.6.0 -> 1.6.1
- Note about mod_security 2.x
- (later the same day) downgraded auth_ldap back to 1.6.0
2007/03/30 - mod_perl 1.29 -> 1.30 (fixes CVE-2007-1349)
Oct 12, 2006 - Forgot to update one "mod_ssl 2.8.27" (the underlined one)
Aug 19, 2006 - apache 1.3.36 -> 1.3.37
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3747">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3747</a>
<a href="http://www.kb.cert.org/vuls/id/395412">http://www.kb.cert.org/vuls/id/395412</a>
- mod_ssl 2.8.27 -> 2.8.28
- PHP 4.4.2 -> 4.4.4
- mm 1.4.0 -> 1.4.2
Jul 17, 2006 - apache 1.3.34 -> 1.3.36
- mod_ssl 2.8.25 -> 2.8.27
- mod_security 1.9.2 -> 1.9.4
- Removed mod_frontpage part, added note to the top
- Added section to create a temporary copy of Apache so
there's (almost) no downtime between stopping the old
Apache and starting the new one
Mar 16, 2006 - Updated notes for setting up mod_dav
- PHP 4.4.1 -> 4.4.2
- mod_security 1.9.0 -> 1.9.2
Nov 14, 2005 - Added patch for PHP that fixes a problem I had
with SquirrelMail (a webmail)
Nov 7, 2005 - PHP 4.4.0 -> 4.4.1
- mod_security 1.8.7 -> 1.9
(previous releases where named modsecurity-x.x, this is
modsecurity-apache-x.x)
- Added /etc/profile.d/apache.sh so you can set apache's man
and bin dirs in your MANPATH and PATH
Oct 18, 2005 - apache 1.3.33 -> 1.3.34
Fixes bugs and these two security issues:
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0940">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0940</a>
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0492">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0492</a>
- mod_ssl 2.8.24 -> 2.8.25
- After 'make install'ing mod_perl, make sure all files are
writeable by the owner
- Fixed example /etc/logrotate.d/apache
(access.log -> access_log, error.log -> error_log)
and added ssl logs
- Exclude bin, icons, include, libexec and man dirs from
backup of Apache
- Fixed path of apachectl with the part that stops Apache
Oct 14, 2005 - Removed home page links for PHP prerequisites that already
had a link to the howto
- Added PHP info about mcrypt, DOM, iconv
Sep 7, 2005 - mm 1.3.1 -> 1.4.0
- mod_ssl 2.8.23 -> 2.8.24 (fixes CAN-2005-2700)
- Don't create ~/backup/apache as non-root user, don't cd
into /usr/local when backing up the old apache, or you
might get lost while su'd
Jul 28, 2005 - Fixed what I added last time :-)
<EOF >> /etc/logrotate.d/apache
->
<<EOF > /etc/logrotate.d/apache
Jul 21, 2005 - Added creation of /etc/logrotate.d/apache
Jul 13, 2005 - PHP 4.3.11 -> 4.4.0
Jul 8, 2005 - Rearranged options to shut up the new find
- Run chown -R root:root when $UID = 0
- Moved source directory (see note <a href="howtos.php?msd">here</a>)
- Added sha1sum verification for Apache, mod_ssl, and
mod_perl tarballs
- mod_ssl 2.8.22 -> 2.8.23
- Updated note about mod_perl for apache 2.x
- Updated the mod_frontpage notes to include the latest
supported versions (even though I haven't tried them...)
Apr 1, 2005 - Updated note about mod_perl for apache 2.x
- root.root -> root:root
- Changed md5sum and sha1sum verification to output OK
(or not)
- PHP 4.3.10 -> 4.3.11
Mar 9, 2005 - Added installation of mod_security 1.8.7
Dec 22, 2004 - Forgot to change the version at the top to 1.3.33
- Updated note about mod_frontpage
- PHP 4.3.9 -> 4.3.10
Nov 1, 2004 - mod_ssl 2.8.19 -> 2.8.22
- PHP 4.3.8 -> 4.3.9
- apache 1.3.31 -> 1.3.33:
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0940">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0940</a>
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0492">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0492</a>
Sep 17, 2004 - mm 1.3.0 -> 1.3.1
- mod_ssl 2.8.18 -> 2.8.19
- Updated note about mod_perl for apache2 (the current
apache2 version that is out)
- Added md5sum verification for mod_perl
Jul 14, 2004 - PHP 4.3.6 -> 4.3.8
<a href="http://security.e-matters.de/advisories/122004.html">http://security.e-matters.de/advisories/122004.html</a>
<a href="http://security.e-matters.de/advisories/112004.html">http://security.e-matters.de/advisories/112004.html</a>
Jun 10, 2004 - mod_ssl 2.8.17 -> 2.8.18, security fix:
<a href="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0488">http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0488</a>
- PHP 4.3.6 -> 4.3.7
May 13, 2004 - Apache 1.3.29 -> 1.3.31
Fixes four potential security issues:
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0987">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0987</a>
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0020">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0020</a>
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0174">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0174</a>
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0993">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0993</a>
- mod_ssl 2.8.16 -> 2.8.17
Apr 21, 2004 - PHP 4.3.4 -> 4.3.6
Mar 23, 2004 - Changed the blurb about UW-IMAP to link to the new howto
Mar 19, 2004 - Replaced a few < and > characters with &gt; and
&lt; (in Apache config examples) that were being
interpreted as HTML
- Replaced the md5sum -> textutils links with links to
coreutils
Nov 13, 2003 - 1.3.28 -> 1.3.29
Security fixes:
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-CAN-2003-0542">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-CAN-2003-0542</a>
- Reference(s) to apache 2.x are linked to the howto
- mod_ssl 2.8.15 -> 2.8.16
- Replaced applying the FrontPage extensions patch with notes
about how it's done now
- imap-2002d -> imap-2002e
Oct 8, 2003 - apache 1.3.27 -> 1.3.28
- Create ~/backup/apache and ~/installed/apache with mode 700
- Minor update to the gpg verifications
- mod_ssl 2.8.14 -> 2.8.15
- mod_perl 1.28 -> 1.29
- php 4.3.2 -> 4.3.3
- Fixed --enable-mime-magic to --with-mime-magic which was
changed in PHP 4.3.2
- Removed --enable-track-vars for PHP build, apparently this
was removed in 4.0.1 and I didn't notice
Sep 25, 2003 - Changed --with-zlib-dir in PHP build from /usr/local/lib
to /usr/lib (my zlib howto how puts it in /usr)
Jul 10, 2003 - mod_perl 1.27 -> 1.28
- Updated note about the mod_frontpage patch, RTR considers
1.3.27 supported. I don't use mod_frontpage any more, last
time I checked the site it supported up to 1.3.26 with the
1.3.22 patch.
- Added link to libjpeg howto, building of PHP with
--with-jpeg-dir
- Fixed buglet where the howto would try to re-use a tarball
for mod_ssl in ~/installed/ instead of ~/installed/apache/
- Removed notes about and building of --with-cyrus and
--with-pspell into PHP, they're _very_ outdated and
neither one has a maintainer
- Added links to PHP prerequisites
Jun 3, 2003 - Updated note about mod_perl 1.99x (1.99_09 is out)
- uw-imap 2002b -> 2002d
- PHP 4.3.1 -> 4.3.2
Apr 11, 2003 - mm 1.2.2 -> 1.3.0
- mod_ssl 2.8.12 -> 2.8.14
- Updated gpg verification all around, added link to gnupg
howto
- Added md5sum link to textutils howto
- Set to re-use existing tarballs for re-installation
Mar 12, 2003 - Added building of mime_magic support for PHP
Feb 22, 2003 - uw-imap 2002a -> 2002b
- PHP 4.3.0 -> 4.3.1
Dec 31, 2002 - mm 1.2.1 -> 1.2.2
- PHP 4.2.3 -> 4.3.0
Changed configure switch from --enable-cli to
--disable-cgi which will (now) cause make install to
install the command line version of php into
/usr/local/bin (which we were doing manually before)
Removed notes about the old, old aspell extension
uw-imap 2002 -> 2002a
Removed curl from the PHP build, I've never used it
(in PHP)
Updated notes about --with-cyrus
Updated notes about --with-gd
Added --with-zlib-dir=/usr/local/lib for --with-gd
Dec 17, 2002 - Updated removal of previous version source dirs
Updated the "If Apache is already installed" part to be
more paranoid.
Nov 25, 2002 - Updated removal of previous versions and shared lib files
for mm
- uw-imap 2002.RC10 -> 2002
- Added a patch for php so gd 2.0.8 works
Nov 18, 2002 - mod_ssl 2.8.11 -> 2.8.12
- Added gpg verification of mod_ssl
- Cleaned up various notes throughout
- Added/updated removal of previous versions
- uw-imap 2002.RC7 -> 2002.RC10
Oct 10, 2002 - Added gpg verification of mod_perl tarball
- Updated uw-imap to 2002.RC7
- Added a note about pspell
- Added md5sum verification of php tarball
- Added note about PHP's --with-cyrus being outdated
- Added section referring to the ucd and net-snmp howtos
- Added note about GD 2.x beta not working with PHP
Oct 8, 2002 - Replaced GD instructions with link to the GD howto
- Replaced curl instructions with link to the curl howto
- Apache 1.3.26 -> 1.3.27
- Added md5sum and gpg verification of Apache
- mod_ssl 2.8.10 -> 2.8.11
Sep 11, 2002 - Bin Laden can kiss my ass
- Added --enable-sockets to PHP build
- Removed ColdFusion - I'll never use it again...
Sep 8, 2002 - PHP 4.2.2 -> 4.2.3
Sep 2, 2002 - Added --with-curl to PHP build
- Added --enable-cli to PHP build
- uw imap c-client v 2002.RC2 -> RC4
Aug 12, 2002 - Replaced < with &lt; and > with &gt; (so you can see it! <g>)
Aug 11, 2002 - Updated make LIBS line for building auth_ldap
Jul 30, 2002 - Updated mm from 1.1.3 to 1.2.1 (security)
- Verified that all is well with mod_ssl 2.8.10 and perl 5.8.0
Jul 28, 2002 - Changed PHP build from static to DSO
- Added descriptions to optional PHP prereqs
- Updated uw imap c-client from 2001a to 2002.RC2
Jul 23, 2002 - Added links to the web site for each piece of software
- Updated for PHP 4.2.2 (security)
- Updated mod_frontpage notes
- First ChangeLog entry