From owner-freebsd-apache@FreeBSD.ORG Wed Sep 15 17:07:02 2004 Return-Path: Delivered-To: freebsd-apache@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 28E6A16A4CE for ; Wed, 15 Sep 2004 17:07:02 +0000 (GMT) Received: from goofy.cultdeadsheep.org (charon.cultdeadsheep.org [80.65.226.72]) by mx1.FreeBSD.org (Postfix) with SMTP id 43C3743D49 for ; Wed, 15 Sep 2004 17:06:56 +0000 (GMT) (envelope-from sheepkiller@cultdeadsheep.org) Received: (qmail 11403 invoked by uid 89); 15 Sep 2004 19:06:47 +0200 Received: from sheepkiller@cultdeadsheep.org by goofy.cultdeadsheep.org by uid 89 with qmail-scanner-1.22st Clear:RC:1(192.168.0.4):SA:0(-1.6/5.0):. Processed in 2.151617 secs); 15 Sep 2004 17:06:47 -0000 X-Spam-Status: No, hits=-1.6 required=5.0 X-Qmail-Scanner-Mail-From: sheepkiller@cultdeadsheep.org via goofy.cultdeadsheep.org X-Qmail-Scanner: 1.22st (Clear:RC:1(192.168.0.4):SA:0(-1.6/5.0):. Processed in 2.151617 secs Process 11373) Received: from unknown (HELO satan.cultdeadsheep.org) (192.168.0.4) by goofy.cultdeadsheep.org with SMTP; 15 Sep 2004 19:06:45 +0200 Date: Wed, 15 Sep 2004 19:06:33 +0200 From: Clement Laforet To: apache@FreeBSD.org Message-Id: <20040915190633.11840166.sheepkiller@cultdeadsheep.org> Organization: tH3 cUlt 0f tH3 d3@d sH33p X-Mailer: Sylpheed version 0.9.12 (GTK+ 1.2.10; i386-portbld-freebsd6.0) Mime-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg="pgp-sha1"; boundary="Signature=_Wed__15_Sep_2004_19_06_33_+0200_r=C9BP.XCySxaBJq" X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on goofy.cultdeadsheep.org X-Spam-Level: Subject: Fw: cvs commit: ports/www/apache2 Makefile Makefile.doc Makefile.modules.3rd ports/www/apache2/files patch-secfix-modules:dav:fs:lock.c patch-secfix-server:utils.c patch-secfix-srclib:apr-util:test:testuri.c X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Sep 2004 17:07:02 -0000 --Signature=_Wed__15_Sep_2004_19_06_33_+0200_r=C9BP.XCySxaBJq Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: 7bit FYI. Begin forwarded message: Date: Wed, 15 Sep 2004 16:54:37 +0000 (UTC) From: Clement Laforet To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports/www/apache2 Makefile Makefile.doc Makefile.modules.3rd ports/www/apache2/files patch-secfix-modules:dav:fs:lock.c patch-secfix-server:utils.c patch-secfix-srclib:apr-util:test:testuri.c clement 2004-09-15 16:54:37 UTC FreeBSD ports repository Modified files: www/apache2 Makefile Makefile.doc Makefile.modules.3rd Added files: www/apache2/files patch-secfix-modules:dav:fs:lock.c patch-secfix-server:utils.c patch-secfix-srclib:apr-util:test:testuri.c Log: Security fixes [1]: *) SECURITY: CAN-2004-0786 (cve.mitre.org) Fix an input validation issue in apr-util which could be triggered by malformed IPv6 literal addresses. [Joe Orton] *) SECURITY: CAN-2004-0747 (cve.mitre.org) Fix buffer overflow in expansion of environment variables in configuration file parsing. [Andr Malo] *) SECURITY: CAN-2004-0809 (cve.mitre.org) mod_dav_fs: Fix a segfault in the handling of an indirect lock refresh. PR 31183. [Joe Orton] - Update documentation (finally!) and fix WITH__MODULES for special modules like LDAP or SSL [2] Noticed by: nectar [1] Requested by: Emile Heitor [2] Approved by: portmgr (marcus) Revision Changes Path 1.199 +17 -3 ports/www/apache2/Makefile 1.10 +23 -18 ports/www/apache2/Makefile.doc 1.11 +2 -2 ports/www/apache2/Makefile.modules.3rd 1.1 +46 -0 ports/www/apache2/files/patch-secfix-modules:dav:fs:lock.c (new) 1.1 +132 -0 ports/www/apache2/files/patch-secfix-server:utils.c (new) 1.1 +33 -0 ports/www/apache2/files/patch-secfix-srclib:apr-util:test:testuri.c (new) -- --Signature=_Wed__15_Sep_2004_19_06_33_+0200_r=C9BP.XCySxaBJq Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (FreeBSD) iD8DBQFBSHaZsRhfjwcjuh0RAod6AKC1EydOQkL0uJSZHztFkn3X9BAA9gCdEJiw JqK52aHmzavjaAG1oA1N2Mc= =XLPC -----END PGP SIGNATURE----- --Signature=_Wed__15_Sep_2004_19_06_33_+0200_r=C9BP.XCySxaBJq--