packages: lighttpd/lighttpd-mod_access.conf, lighttpd/lighttpd.spec - forbi...

[glen]

Author: glen                         Date: Thu Nov 25 11:29:40 2010 GMT
Module: packages                      Tag: HEAD
---- Log message:
- forbid access to CVS or RCS dirs in a way allowing still access files named CVS.txt

---- Files affected:
packages/lighttpd:
   lighttpd-mod_access.conf (1.4 -> 1.5) , lighttpd.spec (1.341 -> 1.342) 

---- Diffs:

================================================================
Index: packages/lighttpd/lighttpd-mod_access.conf
diff -u packages/lighttpd/lighttpd-mod_access.conf:1.4 packages/lighttpd/lighttpd-mod_access.conf:1.5
--- packages/lighttpd/lighttpd-mod_access.conf:1.4	Thu Apr 16 09:13:53 2009
+++ packages/lighttpd/lighttpd-mod_access.conf	Thu Nov 25 12:29:34 2010
@@ -14,6 +14,7 @@
 # *,v and *,t - CVS files
 url.access-deny = ( "~", ".inc", ",v", ",t" )
 
-$HTTP["url"] =~ "(?:CVS|RCS)" {
+# forbid access to files inside CVS or RCS dirs
+$HTTP["url"] =~ "/(?:CVS|RCS)/" {
 	url.access-deny = ("")
 }

================================================================
Index: packages/lighttpd/lighttpd.spec
diff -u packages/lighttpd/lighttpd.spec:1.341 packages/lighttpd/lighttpd.spec:1.342
--- packages/lighttpd/lighttpd.spec:1.341	Sat Nov 13 13:08:16 2010
+++ packages/lighttpd/lighttpd.spec	Thu Nov 25 12:29:34 2010
@@ -26,7 +26,7 @@
 Summary(pl.UTF-8):	Szybki i lekki serwer HTTP
 Name:		lighttpd
 Version:	1.4.28
-Release:	4
+Release:	5
 License:	BSD
 Group:		Networking/Daemons/HTTP
 Source0:	http://download.lighttpd.net/lighttpd/releases-1.4.x/%{name}-%{version}.tar.bz2
@@ -1311,6 +1311,9 @@
 All persons listed below can be reached at <cvs_login>@pld-linux.org
 
 $Log$
+Revision 1.342  2010/11/25 11:29:34  glen
+- forbid access to CVS or RCS dirs in a way allowing still access files named CVS.txt
+
 Revision 1.341  2010/11/13 12:08:16  pawelz
 - release 4
 
================================================================

---- CVS-web:
    http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/packages/lighttpd/lighttpd-mod_access.conf?r1=1.4&r2=1.5&f=u
    http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/packages/lighttpd/lighttpd.spec?r1=1.341&r2=1.342&f=u