Hello community, here is the log from the commit of package apache2 for openSUSE:Factory checked in at Mon Mar 2 01:27:01 CET 2009. -------- --- apache2/apache2.changes 2009-02-26 11:25:34.000000000 +0100 +++ /mounts/work_src_done/STABLE/apache2/apache2.changes 2009-02-27 16:52:40.000000000 +0100 @@ -1,0 +2,5 @@ +Fri Feb 27 16:51:58 CET 2009 - anicka@suse.cz + +- set TraceEnable off (bnc#301380) + +------------------------------------------------------------------- calling whatdependson for head-i586 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apache2.spec ++++++ --- /var/tmp/diff_new_pack.N32394/_old 2009-03-02 01:25:59.000000000 +0100 +++ /var/tmp/diff_new_pack.N32394/_new 2009-03-02 01:25:59.000000000 +0100 @@ -63,7 +63,7 @@ Group: Productivity/Networking/Web/Servers %define realver 2.2.11 Version: 2.2.11 -Release: 2 +Release: 3 #Source0: http://www.apache.org/dist/httpd-%{version}.tar.bz2 Source0: http://httpd.apache.org/dev/dist/httpd-%{realver}.tar.bz2 Source10: SUSE-NOTICE @@ -1045,6 +1045,8 @@ fi %changelog +* Fri Feb 27 2009 anicka@suse.cz +- set TraceEnable off (bnc#301380) * Wed Feb 25 2009 prusnak@suse.cz - moved Snakeoil certificates to separate subpackage example-certificates [bnc#419601] ++++++ apache2-default-server.conf ++++++ --- /var/tmp/diff_new_pack.N32394/_old 2009-03-02 01:26:00.000000000 +0100 +++ /var/tmp/diff_new_pack.N32394/_new 2009-03-02 01:26:00.000000000 +0100 @@ -104,3 +104,5 @@ # The manual... if it is installed ('?' means it won't complain) Include /etc/apache2/conf.d/apache2-manual?conf +# Disable TRACE command as it can be exploited for XSS attacks +TraceEnable off ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org