[Pkg-apache-commits] r1167 - in /trunk/apache2: changelog config-dir/apache2.conf

[sf at alioth.debian.org]

Author: sf
Date: Wed Mar 10 20:07:55 2010
New Revision: 1167

URL: http://svn.debian.org/wsvn/pkg-apache/?sc=1&rev=1167
Log:
add Satisfy all to Files ~ "^\.ht" block

Modified:
    trunk/apache2/changelog
    trunk/apache2/config-dir/apache2.conf

Modified: trunk/apache2/changelog
URL: http://svn.debian.org/wsvn/pkg-apache/trunk/apache2/changelog?rev=1167&op=diff
==============================================================================
--- trunk/apache2/changelog (original)
+++ trunk/apache2/changelog Wed Mar 10 20:07:55 2010
@@ -1,10 +1,12 @@
-apache2 (2.2.15-2) UNRELEASED; urgency=low
-
+apache2 (2.2.15-3) UNRELEASED; urgency=low
+
+  * Make the Files ~ "^\.ht" block in apache2.conf more secure by adding
+    Satisfy all. Closes: #572075
   * mod_reqtimeout: Various bug fixes, including:
     - Don't mess up timeouts of mod_proxy's backend connections.
       Closes: #573163
 
- -- Stefan Fritsch <sf at debian.org>  Wed, 10 Mar 2010 20:51:34 +0100
+ -- Stefan Fritsch <sf at debian.org>  Wed, 10 Mar 2010 21:06:06 +0100
 
 apache2 (2.2.15-1) unstable; urgency=low
 

Modified: trunk/apache2/config-dir/apache2.conf
URL: http://svn.debian.org/wsvn/pkg-apache/trunk/apache2/config-dir/apache2.conf?rev=1167&op=diff
==============================================================================
--- trunk/apache2/config-dir/apache2.conf (original)
+++ trunk/apache2/config-dir/apache2.conf Wed Mar 10 20:07:55 2010
@@ -159,6 +159,7 @@
 <Files ~ "^\.ht">
     Order allow,deny
     Deny from all
+    Satisfy all
 </Files>
 
 #