--- rpms/e-smith-apache/sme8/e-smith-apache.spec 2012/06/30 03:32:05 1.14 +++ rpms/e-smith-apache/sme8/e-smith-apache.spec 2014/10/24 10:46:50 1.18 @@ -1,10 +1,10 @@ -# $Id: e-smith-apache.spec,v 1.13 2011/12/23 20:58:23 snetram Exp $ +# $Id: e-smith-apache.spec,v 1.17 2014/01/14 04:12:43 wellsi Exp $ Summary: e-smith server and gateway - apache module %define name e-smith-apache Name: %{name} %define version 2.2.0 -%define release 9 +%define release 13 Version: %{version} Release: %{release}%{?dist} License: GPL @@ -18,6 +18,9 @@ Patch4: e-smith-apache-2.2.0-optionDisab Patch5: e-smith-apache-2.2.0-disable-SSLv2.patch Patch6: e-smith-apache-2.2.0-server-resources-redirect-fix.patch Patch7: e-smith-apache-2.2.0-disableIconsIndex.patch +Patch8: e-smith-apache-2.2.0-apache_modules.patch +Patch9: e-smith-apache-2.2.0-35SSL10SSLCipherSuite.patch +Patch10: e-smith-apache-2.2.0-mitigate_crime.patch BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot BuildArchitectures: noarch Requires: e-smith-base >= 4.15.1 @@ -33,6 +36,18 @@ BuildRequires: e-smith-devtools >= 1.11. e-smith server and gateway software - apache module. %changelog +* Fri Oct 24 2014 Daniel Berteaud 2.2.0-13.sme +- Mitigate CRIM, CVE-2012-4929 [SME: 8614] + +* Mon Jan 13 2014 Ian Wells 2.2.0-12.sme +- Remove insecure ciphers [SME: 7916] + +* Mon Oct 07 2013 John H. Bennett III 2.2.0-11.sme +- Re-do patch to add missing default httpd.conf modules [SME: 7871] + +* Fri Oct 04 2013 John H. Bennett III 2.2.0-10.sme +- Patch to add missing default httpd.conf modules [SME: 7871] + * Fri Jun 29 2012 Ian Wells 2.2.0-9.sme - Disable index listing of Apache icons folder [SME: 7015] @@ -559,6 +574,9 @@ e-smith server and gateway software - ap %patch5 -p1 %patch6 -p1 %patch7 -p1 +%patch8 -p1 +%patch9 -p1 +%patch10 -p1 %pre