--- rpms/e-smith-apache/sme8/e-smith-apache.spec 2013/10/07 23:19:19 1.16 +++ rpms/e-smith-apache/sme8/e-smith-apache.spec 2014/10/31 11:42:12 1.20 @@ -1,10 +1,10 @@ -# $Id: e-smith-apache.spec,v 1.15 2013/10/04 23:38:18 mrjhb3 Exp $ +# $Id: e-smith-apache.spec,v 1.19 2014/10/24 10:56:04 vip-ire Exp $ Summary: e-smith server and gateway - apache module %define name e-smith-apache Name: %{name} %define version 2.2.0 -%define release 11 +%define release 14 Version: %{version} Release: %{release}%{?dist} License: GPL @@ -19,6 +19,7 @@ Patch5: e-smith-apache-2.2.0-disable-SSL Patch6: e-smith-apache-2.2.0-server-resources-redirect-fix.patch Patch7: e-smith-apache-2.2.0-disableIconsIndex.patch Patch8: e-smith-apache-2.2.0-apache_modules.patch +Patch9: e-smith-apache-2.2.0-35SSL10SSLCipherSuite.patch BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot BuildArchitectures: noarch Requires: e-smith-base >= 4.15.1 @@ -34,6 +35,15 @@ BuildRequires: e-smith-devtools >= 1.11. e-smith server and gateway software - apache module. %changelog +* Fri Oct 31 2014 Daniel Berteaud 2.2.0-14.sme +- Revert CRIME mitigation patch, as it's not needed [SME: 8614] + +* Fri Oct 24 2014 Daniel Berteaud 2.2.0-13.sme +- Mitigate CRIME, CVE-2012-4929 [SME: 8614] + +* Mon Jan 13 2014 Ian Wells 2.2.0-12.sme +- Remove insecure ciphers [SME: 7916] + * Mon Oct 07 2013 John H. Bennett III 2.2.0-11.sme - Re-do patch to add missing default httpd.conf modules [SME: 7871] @@ -567,6 +577,7 @@ e-smith server and gateway software - ap %patch6 -p1 %patch7 -p1 %patch8 -p1 +%patch9 -p1 %pre