Improvements and Fixes:

• Apache HTTP Server 1.3.41

Package inluded into H-Sphere System Packages Update

Improvements and Fixes:

• Apache HTTP Server 1.3.39
• Fixed vulnerabilities in Apache
• ModSecurity 1.9.5
• Added ssl_request_log file to logrotation file list

Package inluded into H-Sphere System Packages Update

Improvements and Fixes:

• Fix in the forming default index.htm page
• Fixed file permissions for default error pages
• Fixed problem with web logical server VirtualHosts if Shared SSL is switched on.

Improvements and Fixes:

• Changes in httpd.conf.tmpl
• Fixed possible security hole: changed parameter for AllowOverride directive from All to None in <Directory /> container
• Added directive LockFile: /hsphere/local/var/httpd/logs/accept.lock (required in case of LoadBalancing scheme)
• Added errors handling (ErrorDocument directives and typical error-pages)
• Changed default DocumentRoot to ~httpd/htdocs/default
• Added _default_ virtual host for non-existing IP/port pairs
• Changes in lsrv.conf.tmpl
• Added server index page as default virtual host for https
• Added httpd.conf-<OldVersion>_<NewVersion>.diff (allows to patch httpd.conf.tmpl.custom & lsrv.conf.tmpl.custom)
• Added modified index.html and error pages located in ~httpd/docs/default
• Changed procedure of forming default index.html in conf_httpd. Taken into account the extended scheme of frontend location for Horde, PhpMyAdmin, PhpPgAdmin.

Improvements and Fixes:

• Fixed mod_traffic_psoft traffic calculation, internal redirects were taken into account when rewrite engine is enabled
• Removed duplication of VirtualHost entries for logical servers with the same IP

Package inluded into H-Sphere 2.5 Patch 8

Improvements and Fixes:

• Fixed mod_traffic_psoft traffic calculation, extended output format (TrafficLogExtended On|Off)

Package inluded into H-Sphere 2.5 Patch 7

Improvements and Fixes:

• Fixed mod_traffic_psoft calculation inconsistency for the incoming HTTP traffic
• Building mod_security with pcre API
• Fixed logs directory location for apache service on master box in the load balancing scheme
• Fixed default index.html page formation in case of HS cluster configuration behind NAT

Package inluded into H-Sphere System Packages Update

Improvements and Fixes:

• Change to startup and auto-configuration scripts related to new load balancing scheme
• Improved suexec patch, which allows to use standalone PHP4 &PHP5 CGI in case when /hsphere is symbolic link

Improvements and Fixes:

• Improved Apache log files in the load ballancing scheme
• Removed duplicate php_error.log entry from /etc/newsyslog.conf file (on FreeBSD)
• Disabled a set of unused apache modules in httpd.conf template:
  • expires_module
  • headers_module
  • usertrack_module
  • log_forensic_module
• Minor fixes in package post-installation procedure

This version was released with H-Sphere 2.5 Patch 5

Improvements and Fixes:

• Contains Apache of 1.3.37 version
• Fixes mod_rewrite Off-By-One Buffer Overflow Vulnerability
• Includes PHP 4.4.3

This version was released with System packages update

Improvements and Fixes:

• Included custom template for index.html
• Fixed apachectl in restart section
• Patched apache suexec (for php-cgi execution)

Improvements and Fixes:

• Apache 1.3.36
• Increased FD_SETSIZE parameter
• Eliminated Frontpage vulnerability reported in Microsoft Security Bulletin
• Resolved access.log rotation file issue for mail only boxes

This package includes changes to support load balancing in the new 2.5 H-Sphere branch.

Improvements and Fixes:

• modified apache startup files - pid file is identical with that of the httpd.conf file (important for update automation in load balancing environment).
• added clfmerge and related utilites from logtools distribution to apply the new apache log rotation scheme in load balancing environment.

This package is a CP and Web&Mail servers' update, which eliminates vulnerability found in PHP.

This package is based on Apache 1.3.34 version.

Improvements and Fixes:

• httpd.conf file optimized by splitting it into separate files and combining it via the Include directives
• Using all apache modules as a loadable DSO
• Adding mod_psoft_traffic and mod_accounting-0.5 DSO. First to be used as a replacement tool for web traffic calculation.