thttpd (2.23beta1-4) unstable; urgency=high * extras/syslogtocern: applied patch to fix race condition in the tempfile-creation by using proper mktemp now. The tmp1 file could be recreated after it has been removed, and made it possible to conduct symlink attacks against the users running the script. Thanks to Javier Fernández-Sanguino Peña . -- Daniel Baumann Wed, 26 Oct 2005 15:02:00 +0200 thttpd (2.23beta1-3) unstable; urgency=high * New maintainer (Closes: #279522). * Removed debconf related stuff, configuration modified: default mode is chroot now (Closes: #284344). -- Daniel Baumann Tue, 15 Feb 2005 19:52:00 +0100 thttpd (2.23beta1-2.5) unstable; urgency=high * Non-Maintainer Upload. * Re-upload 2.23beta1-2.4 with urgency=high. -- Steinar H. Gunderson Sat, 28 Aug 2004 16:16:01 +0200 thttpd (2.23beta1-2.4) unstable; urgency=low * Non-Maintainer Upload. * Fix buffer overrun in htpasswd. (Patch from pp@ieee.org, Closes: #253816) -- Steinar H. Gunderson Sat, 28 Aug 2004 14:55:54 +0200 thttpd (2.23beta1-2.3) unstable; urgency=high * Non-maintainer upload by the Security Team * Applied patch by Jef Poskanzer to fix a remote denial of service attack, and possible execution of arbitrary code (libhttpd.c, CAN-2003-0899, http://www.securityfocus.com/archive/1/342584, http://marc.theaimsgroup.com/?l=thttpd&m=106401027904049, Bug#216677) -- Martin Schulze Tue, 28 Oct 2003 20:20:08 +0100 thttpd (2.23beta1-2.2) unstable; urgency=low * NMU * French debconf templates translation update. Closes: #203684 * Use numeric signal value for kill in init.d script. Closes: #211750 Hope I don't break anything..:-). -- Christian Perrier Fri, 10 Oct 2003 10:47:22 +0200 thttpd (2.23beta1-2) unstable; urgency=low * It's the OLS release * 2.23beta1 orig tarballs have a problem: improper perms. The rules file works around this for now. * Rewrite the init script (closes: 148681, 151853, 152386, 160553, 168222, 182185, 195789, 197746) * Fix for proper handling os SIGUSR1 (closes: 168226) * Fix removal of binary in prerm (closes: 195718) * Fix logrotate script (closes: 151853) * Fix version string in config files (closes: 172833) * Fix description, remove useless data (closes: 199785) * Remove link to non-existent page from README (closes: 123968) * Change to use gettext for translations (closes: 200732) * Add French translation (closes: 201560) -- Chris G. Davis Wed, 23 Jul 2003 07:34:10 -0400 thttpd (2.23beta1-1) unstable; urgency=low * New maintainer (closes: 163004) * New upstream (closes: 158027) * Fixed port mangle on reconfigure (closes: 155337) -- Chris G. Davis Wed, 30 Oct 2002 13:25:13 -0500 thttpd (2.21b-12) unstable; urgency=low * Updated e-mail address. * Removed dependency on mime-support. * Added cgipat=/cgi-bin/* to thttpd.conf * Added force-stop option to /etc/init.d/thttpd. * Document /etc/init.d/thttpd behavior in README.Debian -- Yotam Rubin Wed, 22 May 2002 16:12:16 +0300 thttpd (2.21b-11) unstable; urgency=medium * Ick. thttpd should really close the listening port immediately upon receving SIGUSR1 now. Closes: Bug#139790 * Added depends on net-tools. Closes: Bug#139791 * Urgency set to medium because 139790 slightly breaks the init script. -- Yotam Rubin Sun, 7 Apr 2002 02:59:59 +0300 thttpd (2.21b-10) unstable; urgency=low * Defined CGI_PATTERN to /cgi-bin/* * Really not use poll. Closes: Bug#139105 -- Yotam Rubin Tue, 19 Mar 2002 15:41:22 +0200 thttpd (2.21b-9) unstable; urgency=low * Not using poll(). Closes: Bug#137941 * Increased CGI_TIMELIMIT and MIN_REAP_TIME. Closes: Bug#137943 * Removed references to non-existing man pages. Closes: Bug#101828 * Explicitly define time() in mmc.c Closes: Bug#124476 * Directory listings also specify a charset. Closes: Bug#138455 -- Yotam Rubin Tue, 12 Mar 2002 13:05:06 +0200 thttpd (2.21b-8) unstable; urgency=low * Made thttpd-util's description more verbose. Closes: Bug#121969 * Changed thtpasswd's manpage to read thtpasswd in the description. * logrotate does not start thttpd if it wasn't running in the first place. -- Yotam Rubin Mon, 10 Dec 2001 11:27:54 +0200 thttpd (2.21b-7) unstable; urgency=low * Moved utilities to thttpd-util package. * Silenced log rotation. Closes: Bug#120737 * thttpd provides httpd-cgi. * Modified makeweb to support the configuration of the root user directory during runtime. * Disabled static linking of support utilities. -- Yotam Rubin Wed, 28 Nov 2001 00:55:07 +0200 thttpd (2.21b-6) unstable; urgency=low * Removed makeweb from binary package. Closes: Bug#120536 * /etc/logrotate.d/thttpd is now a configuration file. -- Yotam Rubin Wed, 21 Nov 2001 21:25:26 +0200 thttpd (2.21b-5) unstable; urgency=low * Made modifications to debian/config. Closes: Bug#118921 -- Yotam Rubin Sat, 10 Nov 2001 02:14:27 +0200 thttpd (2.21b-4) unstable; urgency=low * /etc/init.d/thttpd now properly starts and stops thttpd. Closes: Bug#112956 -- Yotam Rubin Sun, 28 Oct 2001 20:52:02 +0200 thttpd (2.21b-3) unstable; urgency=low * SIGUSR1 immediately closes thttpd's listening port. Closes: Bug#107379 * logrotate entry now rotates correctly. -- Yotam Rubin Thu, 2 Aug 2001 01:26:03 +0300 thttpd (2.21b-2) unstable; urgency=low * Fixed templates. Closes: Bug#100738 -- Yotam Rubin Wed, 13 Jun 2001 22:31:11 +0300 thttpd (2.21b-1) unstable; urgency=low * Added german templates. Closes: Bug#99358 * Various fixes to debian/templates. -- Yotam Rubin Thu, 31 May 2001 21:55:56 +0300 thttpd (2.20b-5) unstable; urgency=low * Fixed zero length configuration files. Closes: Bug#98330 -- Yotam Rubin Tue, 22 May 2001 19:56:05 +0300 thttpd (2.20b-4) unstable; urgency=low * Fixed debian/config. Closes: Bug#97194. * Commented out everything in debian/throttle.conf -- Yotam Rubin Sat, 12 May 2001 19:37:15 +0300 thttpd (2.20b-3) unstable; urgency=low * Wrapped lines in debian/templates * Fixed netcraft description in debian/control. Closes: #94904 * Fixed default configuration. Closes: #95195 -- Yotam Rubin Wed, 25 Apr 2001 13:20:34 +0300 thttpd (2.20b-2) unstable; urgency=low * Added debconf support * Minor changes to /etc/init.d/thttpd -- Yotam Rubin Sat, 21 Apr 2001 15:40:59 +0300 thttpd (2.20b-1) unstable; urgency=low * The thttpd process is now owned by www-data * thttpd now handles empty lines in the configuration file properly * If initialization fails, thttpd logs it via syslog. -- Yotam Rubin Sun, 15 Apr 2001 19:21:34 +0300 thttpd (2.16-2) unstable; urgency=low * Fixed typo in debian/control * postrm now properly purges logfiles * Rewrote README.Debian * thttpd compiles successfully * /etc/init.d/thttpd conforms to policy -- Yotam Rubin Fri, 6 Apr 2001 03:08:58 +0200 thttpd (2.16-1) unstable; urgency=low * First Debian release -- Yotam Rubin Wed, 21 Feb 2001 16:32:05 +0200