mini-httpd (1.30-11) unstable; urgency=medium * Added patch redirecting CGI script stderr output to /dev/null. This fixes CGI stderr output being sent to the client, which is not compliant with CGI RFC and breaks some sites. (Closes: #437932) * Added patch which starts logging CGI script invocations. This enables referrer analysis. (Closes: #516307) * Added a basic upstream/metadata tracking acme.com. -- Alexandru Mihail Wed, 19 Jun 2024 23:02:24 +0300 mini-httpd (1.30-10) unstable; urgency=medium * Added patch improving handling of "charset=%s" in error pages and directory listing. Before, a literal "%s" was output as opposed to the actual charset. Now, the correct charset (UTF-8 for dirs and ISO-8859-1 for err) is output. Thanks again, Alexander Foken ! (Closes: #714549) * Added a Systemd DocumentationKey entry fixing lintian warning. This points to the manpage for now. * Added SystemD hardening features to service. The directives I have provided should have no impact. I've confirmed no impact to basic functionality, vhosting, error pages and CGI. I managed to get the service to a "4.7 - OK" rating by using systemd-analyze security mini-httpd (all the way from 9.6). I have NOT enabled hardening features which have a high change of impacting functionality such as removing CAP_CHROOT which would mean mini_httpd's chroot mode of operation is forbidden. Help is welcome in improving these options (maybe someone with a security background could chip in). * Added a NEWS entry informing users of potential breakage due to new systemd hardening features. -- Alexandru Mihail Tue, 16 Apr 2024 00:11:43 +0300 mini-httpd (1.30-9) unstable; urgency=medium * Added patch fixing NPH scripts (SSL) getting an additional HTTP/1.0 200 OK header before the actual expected one. This violates the CGI RFC (RFC-3875). (Closes: #1064656) * Merged branch fixing mini-httpd starting too early after reboot. This only happened using the old init.d script. The systemd service is not affected. Thanks, Jean ! -- Alexandru Mihail Fri, 08 Mar 2024 18:44:18 +0200 mini-httpd (1.30-8) unstable; urgency=medium * Modified mini-httpd.postinst to check if we're doing a fresh install or upgrading. Secondly, if we're fresh installing, the default index.html file is copied into /var/www/html only if no other index files are present (ex: index.cgi). This prevents the shipped index.html overwriting existing index.ext files. If we are upgrading, no files will be touched. (Closes: #1061792) * Removed erroneous duplicate "-C /etc/mini-httpd.conf" in systemd ExecStart. The "-C" call was already present in the EnvironmentFile (/etc/default/mini-httpd) read and used by the service. This resulted in mini-httpd's commandline containing the "-C" call twice. Thanks, Alexander Foken. -- Alexandru Mihail Fri, 02 Feb 2024 19:42:56 +0200 mini-httpd (1.30-7) unstable; urgency=medium * Modified mini-httpd.postinst to not copy /usr/share/doc/mini-httpd/examples/index.html into /var/www/html/index.html if it's not readable, fixing weird edge cases where docker's dpkg cleans up /usr/share/*/examples beforehand, (Closes: #1061070) * Created 0011-fix-typo-in-documentation-maxage which clears confusion regarding the maxage config & cli option, the actual name for the variable being max_age in mini_httpd.c. The patch modifies documentation and help output to reflect this reality. (Closes: #1018900) -- Alexandru Mihail Fri, 19 Jan 2024 21:09:00 +0200 mini-httpd (1.30-6) unstable; urgency=medium * Modified 0003-fix-change-index-document-root and 0005-cgi-php to push index.mini-httpd.html to the end of known index.* array, modified install script to copy the provided index.html into /var/www/html/index.html, if not present (Closes: #1057842) * Moved package provided index.html file to /usr/share/doc/mini-httpd/examples, to avoid lintian warning regarding doc location -- Alexandru Mihail Tue, 12 Dec 2023 00:00:53 +0200 mini-httpd (1.30-5) unstable; urgency=medium * Added patch stripping port numbers in vhost setup. (Closes: #491078). * Corrected systemd service not consuming /etc/default/mini-httpd configurations. Thanks a lot, Johannes Schauer Marin Rodrigues (Closes: #1051374). -- Alexandru Mihail Thu, 21 Sep 2023 01:39:39 +0300 mini-httpd (1.30-4) unstable; urgency=medium * New maintainer. (Closes: #927950). * Declare compliance with Standards-Version 4.6.2. (no changes required). * Added systemd service (fixes lintian W: missing-systemd-service-for-init.d-script). * Changed rules to accommodate the included systemd service. * Removed dependency to empty obsolete package: lsb-base (Safe as we were only depending on LSB init scripts, superseded by the added systemd service and sysv-rc already depending on lsb-base in existing releases for non systemd systems). * Added missing Upstream-Contact and updated Copyright to reflect new Upstream contact email and added new mainainer copyright notice. * Clarified NCSA origins of mini-httpd htpasswd* by adding a corresponding copyright entry with proper attribution. -- Alexandru Mihail Tue, 05 Sep 2023 01:29:43 +0300 mini-httpd (1.30-3) unstable; urgency=medium * QA upload. * Drop d/mini-httpd.manpages, installed with upstream Makefile. Closes: #1013614 * d/rules: - Change target from 'override' to 'execute_after'. - Install upstream changelog under dh_installchangelogs target. * d/control: - Bump debhelper to 13. - Add space after comma in long description. - Document Rules-Requires-Root. - Update Standards-Version to 4.6.1 * d/watch: Bump to version 4. * d/copyright: Change to secure URI. * d/upstream.changelog: Include missing release information, and remove end-of-line whitespace. * Change init system to not start on install, ref. lintian tag [init.d-script-should-always-start-service]. Default settings remains identical. -- Håvard F. Aasen Wed, 20 Jul 2022 23:46:44 +0200 mini-httpd (1.30-2) unstable; urgency=medium * QA upload. * Upload to unstable. * [9a071ed3] Bump standards version to 4.4.0. * [8c12d482] Round-trip patches with gbp-pq. * [e89bd419] Do not strip binary during link phase. * [3637ba33] Add missing versioned dependency on init-system-helpers. * [d8a4302c] Bump debhelper compat to 12. -- Dmitry Bogatov Fri, 12 Jul 2019 01:47:16 +0000 mini-httpd (1.30-1) experimental; urgency=medium * QA upload * Trim trailing whitespace. * Use secure URI in Homepage field. * Use secure copyright file specification URI. * Bump debhelper from old 9 to 10. * Use secure URI in debian/watch. * Remove patches missing from debian/patches/series. * Set QA Group as maintainer (orphan bug #927950). * Fix typo in "fix-makefile" patch. * Include CPPFLAGS into CFLAGS in debian/rules to accommodate upstream Makefile, that does not respect CPPFLAGS. * Bump standards version to 4.3.0 -- Dmitry Bogatov Sat, 11 May 2019 17:57:35 +0000 mini-httpd (1.30-0.2) unstable; urgency=medium * Non-maintainer upload. * Fix null pointer dereference (Closes: #916190) + Thanks: Salva Peiró * Fix typo in path to pidfile in `mini_httpd.conf' (Closes: #893996) -- Dmitry Bogatov Wed, 12 Dec 2018 05:19:14 +0000 mini-httpd (1.30-0.1) unstable; urgency=medium * Non-maintainer upload. * New upstream release (Closes: #913095) * Fix init.d script (Closes: #902816) * Add Vcs-* fields into `debian/control'. -- Dmitry Bogatov Thu, 15 Nov 2018 16:20:33 +0000 mini-httpd (1.23-1.2) unstable; urgency=medium * Non-maintainer upload. * Bring back lost HTTPS support (Closes: #818474). -- Sebastian Andrzej Siewior Thu, 16 Feb 2017 23:14:13 +0100 mini-httpd (1.23-1.1) unstable; urgency=medium * Non-maintainer upload. * Add patch to fix FTBFS in kfreebsd-amd64. Closes: #825713 -- Mattia Rizzolo Fri, 17 Jun 2016 10:06:51 +0000 mini-httpd (1.23-1) unstable; urgency=medium * New upstream release * d/control: - Bump Standard-Version to 3.9.7. * d/upstream.changelog: - Update changes. * d/patches: - Remove patch fix-add_to_response-buffer-overflow fixed for upstream. - Fix support FreeBSD thanks Steven Chamberlain (Closes: #815339) - Add patch fix-autobuilders for a problem with package on 64-bit thanks Steve Langasek (Closes: #819125) * d/rules: - Add hardening - Don`t install htpasswd (LP: #943088) -- Jose dos Santos Junior Fri, 01 Apr 2016 17:32:30 -0300 mini-httpd (1.21-1) unstable; urgency=medium * New upstream release. * New maintainer. (Closes: #780194) * Fix CVE-2015-1548 - Patch fix-add_to_response-buffer-overflow. (Closes: #778925) * d/control: - Bump Standard-Version to 3.9.6. - Bump debhelper to 9. - Remove deprecated dpatch. - Upgrade packaging format "3.0 (quilt)". (Closes: #664363) - Remove article in description synopsis. - Add ${misc:Depends}. * d/copyright - Update to DEP5 format. - Formatting copyright. * d/rules: - Upgrade to dh sequencer. - Added upstream changelog extracted from mini-httpd website. * d/mini-httpd.init.d: - Fix restart error. (Closes: #510905, #755892) * d/patches: - Fix and add SCRIPT_FILENAME in patch 03-cgi-php. (Closes: #569599) - Ensure hardening is enabled for mini_httpd.c. - Don't install htpasswd.1. - Add index.mini-httpd.html to the list of index names. * d/mini-httpd.init.d - Source /lib/lsb/init-functions. - Add "status" command. * d/mini-httpd.postinst - Copy index.mini-httpd.html. (Closes: #730373) - Use "set -e" and don't install htpasswd. (Closes: #520941) -- Jose dos Santos Junior Thu, 03 Sep 2015 14:59:53 -0300 mini-httpd (1.19-9.3) unstable; urgency=low * Non-maintainer upload. * Do not install htpasswd, recommend apache2-utils instead. (Closes: #674515). * Add missing dependencies on $remote_fs to fix a lintian error. -- Bernd Zeimetz Sat, 16 Jun 2012 01:31:28 +0200 mini-httpd (1.19-9.2) unstable; urgency=medium [Jari Aalto] * Non-maintainer upload. * debian/patches - (number 10): New patch to fix htpasswd.c:52: error: conflicting types for 'getline'. . Thanks to Ruben Molina . (FTBFS RC Bug serious; Closes: #552844) -- Jari Aalto Thu, 07 Jan 2010 11:13:26 +0200 mini-httpd (1.19-9.1) unstable; urgency=low * Non-maintainer upload. * Fix bashism (Closes: #525366) * Fix lintian-detected hyphen-used-as-minus-sign errors. * Add watch file. -- Raphael Geissert Sun, 05 Jul 2009 19:38:05 -0500 mini-httpd (1.19-9) unstable; urgency=low * Added kFreeBSD portin patch (Closes: #498368) - Thanks to Petr Salinger * Enabled CGI by default (Closes: #500708) * Fixed init.d script (Closes: #500708, #491083) * data_dir will be created if necessary (Closes: #494437) * Added example index.html * changed default data_dir to /usr/share/mini-httpd/html * Fixed typo in 03-cgi-php.dpatch * Updated Standards-Version to 3.8.0 -- Marvin Stark Thu, 15 Jan 2009 15:28:53 +0100 mini-httpd (1.19-8) unstable; urgency=low * /etc/mini-httpd.conf: - Changed data_dir to /var/www (Closes: #473140) * debian/control: - Removed Homepage from long description - Added Homepage field -- Marvin Stark Fri, 28 Mar 2008 19:13:33 +0000 mini-httpd (1.19-7) unstable; urgency=low * Patched PHP CGI errors (Closes: #462930) Thanks to Thorsten Schmale * Changed Standards-Version to 3.7.3 * Fixed init.d script -- Marvin Stark Tue, 05 Feb 2008 08:56:53 +0000 mini-httpd (1.19-6) unstable; urgency=low * Changed start behavior in default file (Closes: #454230) 1 = start; 0 = stop -- Marvin Stark Tue, 04 Dec 2007 21:52:32 +0000 mini-httpd (1.19-5) unstable; urgency=low * Removed stripping flag from Makefile (Closes: #437570) -- Marvin Stark Wed, 15 Aug 2007 13:11:22 +0000 mini-httpd (1.19-4) unstable; urgency=low * Removed Daniel from uploaders as wished by him. * Fixed init script (Closes: #407775). Thanks to Andreas Metzler. -- Marvin Stark Sun, 21 Jan 2007 11:52:01 +0000 mini-httpd (1.19-3) unstable; urgency=low * Pidfile will be removed, if mini-http gets removed or stopped (Closes: #387941). * Changed start behavior of mini-httpd. -- Marvin Stark Wed, 25 Oct 2006 21:47:43 +0200 mini-httpd (1.19-2) unstable; urgency=low * Resolved conflicts with apache2-utils (Closes: #385268). * Added LSB initscript header. * Renamed mini_httpd.conf to mini-httpd.conf * Renamed mini_httpd.default to mini-httpd.default * Renamed mini_httpd.init.d to mini-httpd.init.d -- Marvin Stark Wed, 13 Sep 2006 18:11:12 +0200 mini-httpd (1.19-1) unstable; urgency=low * Initial release (Closes: #376599, #308660). -- Marvin Stark Mon, 3 Jul 2006 20:12:42 +0200