From ef5b452ba639f4f9476b90d6611992f0530df4a4 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Mon, 1 Jul 2024 19:07:04 +0200 Subject: Releasing progress-linux version 2.4.60-1~progress7.99u1. Signed-off-by: Daniel Baumann --- debian/changelog | 55 +++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 55 insertions(+) diff --git a/debian/changelog b/debian/changelog index 5960e4a..11bad39 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,58 @@ +apache2 (2.4.60-1~progress7.99u1) graograman-backports; urgency=medium + + * Uploading to graograman-backports, remaining changes: + - Updating maintainer field. + - Updating uploaders field. + - Updating bugs field. + - Updating vcs fields. + - Setting Restart to always in systemd unit. + - Exporting hostname variable in global environment. + - Setting ServerTokens to Prod in security.conf. + - Setting ServerSignature to Off in security.conf. + - Setting Content-Security-Policy to "default-src https: 'self'; style- + src https: 'self' 'unsafe-inline'". + - Setting HSTS options to "max-age=63072000; includeSubDomains; + preload". + - Setting additional Set-Cookie options HttpOnly;SameSite=Strict;Secure. + - Setting SSLCipherSuite to EECDH+AESGCM:EDH+AESGCM. + - Setting SSLCompression to off. + - Setting SSLHonorCipherOrder to on. + - Setting SSLOpenSSLConfCmd Curves to X25519:prime256v1. + - Setting SSLProtocol to -all +TLSv1.3. + - Setting Cache-Control headers to "max-age=0, no-cache, no-store, no- + transform, private". + - Setting X-Frame-Options to deny. + - Adding configuration file to no accidentally serve git files. + - Setting Referrer-Policy to no-referrer. + - Setting X-Content-Type-Options to nosniff. + - Setting SSLUseStapling to on. + - Setting SSLStaplingCache to shmcb:/var/run/ocsp(32768). + - Setting SSLStaplingResponderTimeout to 5. + - Setting SSLStaplingReturnResponderErrors to off. + - Adding configuration file to rewrite http to https. + - Adding configuration file for dehydrated ssl certificates. + - Adding configuration file for DH parameter. + - Adding configuration file for snakeoil ssl certificates. + - Setting X-XSS-Protection to "1; mode=block". + - Enabling headers module. + - Enabling http2 module. + - Enabling rewrite module. + - Enabling ssl module. + - Renaming default-ssl.conf site to 000-default-ssl.conf. + - Setting ServerAdmin to root@localhost in default sites. + - Setting example ServerName localhost in default sites. + - Trimming default sites. + - Enabling default-ssl site by default. + - Depending on ssl-cert or dehydrated. + - Enabling rewrite http to https. + - Enabling snakeoil ssl certificates. + - Enabling DH parameter. + - Enabling dehydrated ssl certificates. + * Merging upstream version 2.4.60. + * Merging debian version 2.4.60-1. + + -- Daniel Baumann Mon, 01 Jul 2024 19:06:53 +0200 + apache2 (2.4.60-1) unstable; urgency=medium [ Bastien Roucariès ] -- cgit v1.2.3