2009
yaws (1.77-3+lenny1) stable-security; urgency=high
* Fixed DoS when a huge number of headers are supplied in an HTTP query
(CVE-2009-0751).
-- Sergei Golovan <sgolovan@debian.org> Mon, 09 Mar 2009 09:10:22 +0300
2008
yaws (1.77-3) unstable; urgency=low
* Fixed init.d script to wait until yaws daemon is actually started. * Removed unnecessary displayed messages from yaws postinstall script.
-- Sergei Golovan <sgolovan@debian.org> Sun, 21 Dec 2008 14:16:33 +0300
yaws (1.77-2) unstable; urgency=low
* Removed unnecessary package grep-dctrl from build dependencies.
* Protected hostname -s and hostname -d calls in postinst script to prevent
its failure in case when hostname is incorrectly configured. It's harmless
to replace hostname by "localhost" because it's used only for generating
a reference SSL certificate which is to be replaced by a proper one.
-- Sergei Golovan <sgolovan@debian.org> Fri, 29 Aug 2008 00:46:52 +0400
yaws (1.77-1) unstable; urgency=low
* New upstream release. * Bumped standards version to 3.8.0.
-- Sergei Golovan <sgolovan@debian.org> Fri, 20 Jun 2008 09:55:41 +0400
yaws (1.76-4) unstable; urgency=low
* Fixed bug with processing YAWS control file if it is parseable by
file:consult/1 but doesn't have a meaningful content.
-- Sergei Golovan <sgolovan@debian.org> Sun, 08 Jun 2008 21:32:14 +0400
yaws (1.76-3) unstable; urgency=low
* Added a patch which fixes typo in eacces error code.
* Catched error code 3 in YAWS init script when stopping the server. This
error code means that the server isn't running (closes: #483153).
-- Sergei Golovan <sgolovan@debian.org> Tue, 27 May 2008 22:43:16 +0400
yaws (1.76-2) unstable; urgency=low
* Added checks for error code 2 after quilt invocation which means that all
patches are already pushed/popped. This allows to convert the source
package to 3.0 (quilt) format (closes: #482713).
* Cleaned up debian/rules.
-- Sergei Golovan <sgolovan@debian.org> Sun, 25 May 2008 13:14:53 +0400
yaws (1.76-1) unstable; urgency=low
* New upstream release.
* Fixed build-dependencies (removed -1 suffix from erlang-dev version).
* Removed HOSTNAME variable from postinstall script because it might be
confused with bash environment variable.
* Added a patch which fixes two minor bugs in manpages.
-- Sergei Golovan <sgolovan@debian.org> Fri, 04 Apr 2008 22:01:09 +0400
yaws (1.75-1) unstable; urgency=low
* New upstream release.
* Added a requirement for $remote_fs into init.d script because YAWS needs
mounted /usr to run (closes: #464025).
* Removed empty directories /usr/lib/erlang/lib/yaws-*/examples/* from the
binary package.
* Overridden lintian warnings about empty directories /usr/lib/yaws/ebin
and /usr/lib/yaws/include. They are necessary for YAWS with default config
to start.
-- Sergei Golovan <sgolovan@debian.org> Sun, 17 Feb 2008 17:21:35 +0300
yaws (1.74-2) unstable; urgency=low
* Added a hack to build YAWS on hurd-i386 architecture. * Bumped standards-version to 3.7.3.
-- Sergei Golovan <sgolovan@debian.org> Fri, 04 Jan 2008 13:56:19 +0300
2007
yaws (1.74-1) unstable; urgency=low
* New upstream release.
-- Sergei Golovan <sgolovan@debian.org> Sat, 29 Dec 2007 21:26:24 +0300
yaws (1.73-2) unstable; urgency=low
* Remove /etc/mail/yaws-webmail.conf if it wasn't modified by a user when
upgrading from pre-split yaws package (version 1.66-1 or older). This
config file is moved to yaws-mail package and therefore isn't needed in
main package anymore (closes: #454962).
* Moved yaws pages cache from /var/run/yaws (which may be on a tmpfs) to
/var/cache/yaws and create /var/run/yaws in init.d script if necessary
(closes: #456300).
* Added Homepage field to debian control file.
-- Sergei Golovan <sgolovan@debian.org> Sun, 16 Dec 2007 16:37:33 +0300
yaws (1.73-1) unstable; urgency=low
* New upstream bugfix release.
* Removed patch which fixed SSL connections as it is included into upstream
distribution.
-- Sergei Golovan <sgolovan@debian.org> Tue, 02 Oct 2007 19:10:52 +0400
yaws (1.72-1) unstable; urgency=low
* New upstream release (fixes image files which were broken in 1.70
release).
* Added patch by John Webb which fixes SSL connections to Yaws.
-- Sergei Golovan <sgolovan@debian.org> Thu, 20 Sep 2007 15:51:36 +0400
yaws (1.70-1) unstable; urgency=low
* New upstream release.
* Replaced deprecated ${Source-Version} substitution variable by
${binary:Version} in debian control file.
* Rewritten clean target in debian/rules to ignore only missing Makefile
error (in fact, it is a missing include.mk error).
* Made clean-patched target in debian/rules depend on patch-stamp.
* Redefined HOME environment variable to fix Erlang compiler warnings in
case when HOME points to an existent inaccessible directory.
-- Sergei Golovan <sgolovan@debian.org> Wed, 12 Sep 2007 21:43:35 +0400
yaws (1.68-5) unstable; urgency=low
[ Sergei Golovan ] * Fixed licence agreement in debian/copyright (closes: #440402). * Added Sergei Golovan <sgolovan@debian.org> to uploaders list. * Bumped debhelper compatibility level to 5.
-- Sergei Golovan <sgolovan@debian.org> Sat, 01 Sep 2007 12:36:30 +0400
yaws (1.68-4) unstable; urgency=low
[ Sergei Golovan ] * Added dependency on erlang ABI virtual package. * Relaxed dependency on erlang-dev (moved it to Suggests from Recommends). * Added Yaws homepage to the package description. * Added build-indep and build-arch targets to debian/rules.
-- Torsten Werner <twerner@debian.org> Tue, 26 Jun 2007 19:49:46 +0400
yaws (1.68-3) unstable; urgency=low
[ Sergei Golovan ] * Fixed cleaning up after build (closes: #424093).
-- Torsten Werner <twerner@debian.org> Thu, 17 May 2007 20:39:42 +0400
yaws (1.68-2) unstable; urgency=low
[ Sergei Golovan ]
* Moved document roots away from /var/www. Yaws document root is now ar
/usr/share/yaws, yaws-chat and yaws-mail document roots are in
/usr/share/yaws-chat and yaws-mail respectively. Yaws-wiki requires write
access to its document root, so it is placed to /var/lib/yaws-wiki.
-- Torsten Werner <twerner@debian.org> Mon, 07 May 2007 23:14:59 +0400
yaws (1.68-1) unstable; urgency=low
[ Sergei Golovan ]
* New upstream release.
* Removed patch for multiple config files support (it's included in
upstream distribution).
* Removed patch, which added DESTDIR variable support, (it's included
in upstream distribution).
-- Torsten Werner <twerner@debian.org> Fri, 09 Feb 2007 19:14:42 +0300
yaws (1.66-2) experimental; urgency=low
[ Sergei Golovan ]
* Added patch and unpatch targets to debian/rules.
* Made clean target in debian/rules clean up yaws applications.
* Renamed and documented patches in debian/patches.
* Moved creating yaws user from preinst to postinst script as required
by Debian Policy.
* Split the package into five binary packages. Separated all
applications, supplied with Yaws (chat, mail, wiki, yapp) to their
own packages.
* Added patch to support multiple configs, rewritten Yaws config to
source all files in /etc/yaws/conf.d directory, making installing/
removing applications/virtual hosts easier.
* Added emergency exits in debian/rules in case of errors inside for
loops (thanks to Christoph Berg for pointing out the problem).
* Strictened config directory permissions (thanks to Christoph Berg for
pointing out the problem).
* Replaced SSL certificates supplied with upstream tarball by generated
in postinst script.
-- Torsten Werner <twerner@debian.org> Sat, 13 Jan 2007 19:08:09 +0300
2006
yaws (1.66-1) experimental; urgency=low
[ Torsten Werner ]
* Remove redundant Build-Depends because they are already fulfilled by
erlang-dev.
* Switched to erlang-depends.
* Refactored the package a bit by introducing dh_install.
* Fixed some dpatches.
* Switch from dpatch to quilt.
[ Sergei Golovan ]
* New upstream release.
-- Torsten Werner <twerner@debian.org> Fri, 15 Dec 2006 22:59:40 +0100
yaws (1.65-2) unstable; urgency=low
[ Sergei Golovan ]
* Fixed shared-lib-without-dependency-information lintian warning
by explicitly linking setuid_drv.so to libc.
-- Erlang Packagers <erlang-pkg-devel@lists.berlios.de> Thu, 14 Sep 2006 22:42:00 +0400
yaws (1.65-1) unstable; urgency=low
[ Sergei Golovan ]
* New upstream version.
* Moved Yaws applications to /usr/lib/yaws/<applicationname>
directories, and moved applications' docroots to
/usr/lib/yaws/<applicationname>/priv/docroot directories. Users,
who want to use these applications can copy or link docroots to
/var/www or whatever.
* Overridden image-file-in-usr-lib lintian warning.
* Added erlang-nox to Build-Depends because it is required to
build documentation for new yaws application yapp.
* Added LSB keyword section to init.d script.
* Removed patches which corrected including Yaws headers. They are
included to upstream.
* Added Yaws logo to the default web page.
-- Erlang Packagers <erlang-pkg-devel@lists.berlios.de> Wed, 13 Sep 2006 10:09:08 +0400
yaws (1.64-2) unstable; urgency=low
[ Sergei Golovan ] * Again use /etc/mime.types to build. * Added versioned dependency on erlang.
-- Erlang Packagers <erlang-pkg-devel@lists.berlios.de> Sun, 23 Jul 2006 14:47:10 +0400
yaws (1.64-1) unstable; urgency=low
[ Sergei Golovan ]
* New upstream version.
* Removed patches from yaws_cgi.erl and yaws_ctl.erl because they
are included in upstream.
* Added chat, mail, and wiki applications included into yaws
distribution.
* Added erlang-dev to Recommends section of debian/control (yaws
dynamic pages may require some development files in order to be
compiled in-place).
* Overrided lintian warning shared-lib-without-dependency-information
(the library setuid_drv.so is not to link binaries with it).
* Changed /etc/yaws/yaws.conf permissions to 600 because it may contain
authentication data.
-- Erlang Packagers <erlang-pkg-devel@lists.berlios.de> Fri, 14 Jul 2006 21:45:31 +0400
yaws (1.63-2) unstable; urgency=low
* Fixed Maintainer address in debian/control.
[ Sergei Golovan ]
* Added /usr/lib/yaws/ebin and /usr/lib/yaws/include to directory
list.
* Removed username option from yaws.conf since it isn't supported
anymore.
* Set environment variable SCRIPT_FILENAME to make php-cgi of
version 4.3.2 and above working.
* Added two new variable sto yaws.default. YAWS_USER allows to run yaws
from nonroot user. YAWS_ID specifies daemon id (instead of two
different places - yaws.conf and yaws.init)
* Moved configs to /etc/yaws directory.
* Create new user yaws during installation.
* Patched yaws_ctl.erl to fix insecure controlling of Yaws daemon.
-- Erlang Packagers <erlang-pkg-devel@lists.berlios.de> Thu, 06 Jul 2006 01:03:02 +0400
yaws (1.63-1) unstable; urgency=low
* New upstream release * New mainteners: Erlang Packagers. [ Francois-Denis Gonthier ] * Closes: #366341. No longer depends on Erlang only. * Closes: #356272. Cleans log on purge. * Closes: #353189. We don't need to depend on erlang-src. In all cases erlang-src is in the archive now so it's not longer a bug. [ Sergei Golovan ] * Updated Build-Depends to use erlang 10.b.10. * Moved yaws erlang binaries and includes from /usr/lib/yaws to /usr/lib/erlang/lib/yaws-1.63. This makes yaws modules development easier. * Made yaws using /usr/lib/yaws as its application directory instead of /usr/lib/yaws/examples. * Removed yaws headers from /usr/lib/erlang/lib/yaws-1.63. They duplicate the files in include subdir. * Added two new options to yaws.conf. * Added commented virtual host examples to yaws.conf. * Added get-orig-source target to debian/rules.
-- Erlang Packagers <erlang-pkg-devel@lists.berlios.de> Tue, 20 Jun 2006 11:23:24 +0400
yaws (1.58-1.1) unstable; urgency=low
* Non-maintainer upload.
* debian/control: Removed the build dependency on erlang-src, which doesn't
exist. Added a build dependency on libpam0g-dev. Closes: #353189.
* debian/yaws.postrm: Added. Now removes /var/log/yaws on purge
(see policy 10.8, Log files, last paragraph). Closes: #356272.
-- Lars Wirzenius <liw@iki.fi> Fri, 10 Mar 2006 18:35:58 +0000
yaws (1.58-1) unstable; urgency=low
* New upstream release. * Updated debhelper build dep.
-- Will Newton <will@debian.org> Wed, 15 Feb 2006 20:28:08 +0000
2005
yaws (1.57-1) unstable; urgency=low
* New upstream release. * Use /etc/mime.types for build. (Closes: #317557) * Bumped standards version to 3.6.2.
-- Will Newton <will@debian.org> Wed, 17 Aug 2005 19:33:58 +0100
yaws (1.56-1) unstable; urgency=low
* New upstream version.
- Fixes source disclosure security issue.
-- Will Newton <will@debian.org> Thu, 16 Jun 2005 17:37:07 +0100
yaws (1.55-2) unstable; urgency=low
* Provide httpd-cgi. (Closes: #312911)
-- Will Newton <will@debian.org> Sat, 11 Jun 2005 12:12:14 +0100
yaws (1.55-1) unstable; urgency=low
* New upstream version.
-- Will Newton <will@debian.org> Fri, 10 Jun 2005 16:02:30 +0100
yaws (1.54-1) unstable; urgency=low
* Initial release (Closes: #211544)
-- Will Newton <will@debian.org> Thu, 19 May 2005 20:55:25 +0100