Releasing progress-linux version 2.4.59-1~deb12u1progress7u1.HEADprogress-linux/2.4.59-1_deb12u1progress7u1progress-linux

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 55 insertions, 0 deletions

diff --git a/debian/changelog b/debian/changelog
index ba8398b..03659a5 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,58 @@
+apache2 (2.4.59-1~deb12u1progress7u1) graograman-security; urgency=medium
+
+  * Uploading to graograman-backports, remaining changes:
+    - Updating maintainer field.
+    - Updating uploaders field.
+    - Updating bugs field.
+    - Updating vcs fields.
+    - Setting Restart to always in systemd unit.
+    - Exporting hostname variable in global environment.
+    - Setting ServerTokens to Prod in security.conf.
+    - Setting ServerSignature to Off in security.conf.
+    - Setting Content-Security-Policy to "default-src https: 'self'; style-
+      src https: 'self' 'unsafe-inline'".
+    - Setting HSTS options to "max-age=63072000; includeSubDomains;
+      preload".
+    - Setting additional Set-Cookie options HttpOnly;SameSite=Strict;Secure.
+    - Setting SSLCipherSuite to EECDH+AESGCM:EDH+AESGCM.
+    - Setting SSLCompression to off.
+    - Setting SSLHonorCipherOrder to on.
+    - Setting SSLOpenSSLConfCmd Curves to X25519:prime256v1.
+    - Setting SSLProtocol to -all +TLSv1.3.
+    - Setting Cache-Control headers to "max-age=0, no-cache, no-store, no-
+      transform, private".
+    - Setting X-Frame-Options to deny.
+    - Adding configuration file to no accidentally serve git files.
+    - Setting Referrer-Policy to no-referrer.
+    - Setting X-Content-Type-Options to nosniff.
+    - Setting SSLUseStapling to on.
+    - Setting SSLStaplingCache to shmcb:/var/run/ocsp(32768).
+    - Setting SSLStaplingResponderTimeout to 5.
+    - Setting SSLStaplingReturnResponderErrors to off.
+    - Adding configuration file to rewrite http to https.
+    - Adding configuration file for dehydrated ssl certificates.
+    - Adding configuration file for DH parameter.
+    - Adding configuration file for snakeoil ssl certificates.
+    - Setting X-XSS-Protection to "1; mode=block".
+    - Enabling headers module.
+    - Enabling http2 module.
+    - Enabling rewrite module.
+    - Enabling ssl module.
+    - Renaming default-ssl.conf site to 000-default-ssl.conf.
+    - Setting ServerAdmin to root@localhost in default sites.
+    - Setting example ServerName localhost in default sites.
+    - Trimming default sites.
+    - Enabling default-ssl site by default.
+    - Depending on ssl-cert or dehydrated.
+    - Enabling rewrite http to https.
+    - Enabling snakeoil ssl certificates.
+    - Enabling DH parameter.
+    - Enabling dehydrated ssl certificates.
+  * Merging upstream version 2.4.59.
+  * Merging debian version 2.4.59-1~deb12u1.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Wed, 17 Apr 2024 15:43:07 +0200
+
 apache2 (2.4.59-1~deb12u1) bookworm-security; urgency=medium
 
   * New upstream version 2.4.58