From nobody Sun Jan 15 21:00:45 2023 X-Original-To: apache@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Nw6xp3CH8z2scvP for ; Sun, 15 Jan 2023 21:00:46 +0000 (UTC) (envelope-from bugzilla-noreply@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Nw6xp06Cpz3xYZ for ; Sun, 15 Jan 2023 21:00:46 +0000 (UTC) (envelope-from bugzilla-noreply@FreeBSD.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1673816446; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=88497mCKHOfxpBlmvKDQo8Vm557jn/+YbNLohg/Tgik=; b=RvZEn23ue5LOSJQbDV3uJzjN4hk+7pz8H3q5vjtfoieD9X7hxk6SxwGxkheLnVYNlcAjE+ PBMD2mbcc3dOh5OR3W6GMxlBRhPltltHEHWZFfHhAP6tJ5OeCBB/Tzzu6GumABHK8QfXES TggKdOSdkdH060H3G0zSjC96RQTXUQX/EbcGdsbBxeCmkXNmlU1rEXokoCv0DGUVtDmE9L L7eJb4hiQ32t9S6l2VNUbwlcMyQKhiEAV0eyNHd7cfsc5jdHTxygsVY6r0+7JLDd9ifPJV 8tiQgabK8Ak5U6gLTHNhA5jvfgi6H1S18pcF/41PdEGjQK3pf12e54orDCl16A== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1673816446; a=rsa-sha256; cv=none; b=ZhZInG8M5JDsk7MJtMrK7k1+qLgcG9J8pI0L4iQ4eQ7SmL4EhNCBauT01zLsvy4n3LffVY n7aezILAxi8Lc/O7sBruBACHdGjDVcd6uXW9aOpWVGXejSpYZx8S8bPh5ONfKM0Afnf2S4 EEFzoKQt9f/KJ+8MAf7H1i4IES8jwCeO6M+ACZ4Qdd/sQk3uPzGtZxAuFJLuJnRdEO+fF+ 6v9GlSIuIqsU+UHN9lDIGo0XVnOuKkznDfIv+jRocXXNvTEZMuuom5ie7peJGJhheu/LWD BEVdtLEHh5eyAVjRuIcT5zKk6SlA2P3auxPXP/KcZ/foJXFyfxFu5Mtw8XsKwA== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4Nw6xn6DxKzhPm for ; Sun, 15 Jan 2023 21:00:45 +0000 (UTC) (envelope-from bugzilla-noreply@FreeBSD.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 30FL0jno048752 for ; Sun, 15 Jan 2023 21:00:45 GMT (envelope-from bugzilla-noreply@FreeBSD.org) Received: (from bugzilla@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 30FL0joW048751 for apache@FreeBSD.org; Sun, 15 Jan 2023 21:00:45 GMT (envelope-from bugzilla-noreply@FreeBSD.org) Message-Id: <202301152100.30FL0joW048751@kenobi.freebsd.org> X-Authentication-Warning: kenobi.freebsd.org: bugzilla set sender to bugzilla-noreply@FreeBSD.org using -f From: bugzilla-noreply@FreeBSD.org To: apache@FreeBSD.org Subject: Problem reports for apache@FreeBSD.org that need special attention Date: Sun, 15 Jan 2023 21:00:45 +0000 List-Id: Support of apache-related ports List-Archive: https://lists.freebsd.org/archives/freebsd-apache List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-apache@freebsd.org MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="16738164455.eaAaae19.45892" Content-Transfer-Encoding: 7bit X-ThisMailContainsUnwantedMimeParts: N --16738164455.eaAaae19.45892 Date: Sun, 15 Jan 2023 21:00:45 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" To view an individual PR, use: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=(Bug Id). The following is a listing of current problems submitted by FreeBSD users, which need special attention. These represent problem reports covering all versions including experimental development code and obsolete releases. Status | Bug Id | Description ------------+-----------+--------------------------------------------------- In Progress | 261525 | devel/apr1: Update to use databases/db18 (databas Open | 230538 | devel/apr1 fails with mysql80-client 2 problems total for which you should take action. --16738164455.eaAaae19.45892 Date: Sun, 15 Jan 2023 21:00:45 +0000 MIME-Version: 1.0 Content-Type: text/html; charset="UTF-8" 
The following is a listing of current problems submitted by FreeBSD users,
which need special attention. These represent problem reports covering
all versions including experimental development code and obsolete releases.

Status      |    Bug Id | Description
------------+-----------+---------------------------------------------------
In Progress |    261525 | devel/apr1: Update to use databases/db18 (databas
Open        |    230538 | devel/apr1 fails with mysql80-client

2 problems total for which you should take action.
--16738164455.eaAaae19.45892-- From nobody Tue Jan 17 20:41:51 2023 X-Original-To: apache@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4NxLR361rPz2v1jR for ; Tue, 17 Jan 2023 20:41:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4NxLR3456Cz3wC2 for ; Tue, 17 Jan 2023 20:41:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1673988111; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=96JsforkQRxei1pHsxbm5WPssE94eJwy+kuXZcLTstg=; b=owpXBPi/dz6D7/OhBbiALyFu6cv9f1bYLgq2UWUxMYc+rRyqHuL5OIv1Xfa9Q9ywJnXNw+ 7ejXJPWjHc6KmogtUoI/PYOO0qhwBbfVjBQ9/zedOf6dwssmLIEbCoM5QlTr3gf2GxRQ1P sVA+hwiaiozGxIlUREual5WMAAmiOBdq0hlm3ecsDKQsGo8hhdGTkHVHpYPx5O5hL3IhjN GeAucVueHx0xpNNk/YXrXnnc+1D+/p381OfjRAdw5m1RSM/Km3xs5oTIcGQ5Xe+7GtrurA kJ+T5dUxzFDCKEAoiXgYApTosx/qIZrfG4sQkY7rJKmguWXqRvvv6ILfyDapOA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1673988111; a=rsa-sha256; cv=none; b=qMXWLIhls1aAQKYXjsF8s7PwM55MdFhPox6Mm1DcKNN8/njkndWYlWjOWAtzfCvIQ2s0a0 xr513ql55DTq64aUP73UzpR9G4PVkFB/JVxbhERCskmRbg+U+NdfiD3n+7JbRYBjgtcp3u 4R3gZNsUg7d1qiM7yWlNAKvkvRUyiI9HoAqgm+Q+0OJ+Jey3g1+gSxWixREkad33Vq3e67 iAgipz4J9mZUsrAr1yxaGL8aEWW7MiRvSo7oIs309H6nt8gDTt23EmGaivr11I9autX2QU tG14Xl8vgkdDxab5NgUJ1kQAd1s6SdbqoRdOUgnYgx+dCc4a6OlFZPkdB93HuQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4NxLR338FTzldf for ; Tue, 17 Jan 2023 20:41:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 30HKfpFH050569 for ; Tue, 17 Jan 2023 20:41:51 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 30HKfpLv050568 for apache@FreeBSD.org; Tue, 17 Jan 2023 20:41:51 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" From: bugzilla-noreply@freebsd.org To: apache@FreeBSD.org Subject: maintainer-feedback requested: [Bug 269015] [PATCH] www/apache24: UPdate to 2.4.55 Date: Tue, 17 Jan 2023 20:41:51 +0000 X-Bugzilla-Type: request X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: apache@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? Message-ID: In-Reply-To: References: X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Support of apache-related ports List-Archive: https://lists.freebsd.org/archives/freebsd-apache List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-apache@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N Bugzilla Automation has asked freebsd-apache (Nobody) for maintainer-feedback: Bug 269015: [PATCH] www/apache24: UPdate to 2.4.55 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D269015 --- Description --- Fix multiple vulnerabilities. From nobody Tue Jan 17 20:41:51 2023 X-Original-To: apache@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4NxLR408qhz2v1vd for ; Tue, 17 Jan 2023 20:41:52 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4NxLR365fVz3w6R for ; Tue, 17 Jan 2023 20:41:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1673988111; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=G1JHgvVr5nT58K0toog1CBO/Sm+gD6ueVaLkVglbV7A=; b=qR5v4d+EaxTgIw2Nt1MYRP9pamP+/UHHNHc/8RJ1v0EKJ+UhP7HvTRv/Tvxw+EmG3o/dI/ 0ZhS+Em0zFiJCFeidLZreGLFzi1oSSRicgg2lBHiZQEEAYr8JJgTaL9jzLZJlYEQaFMqAQ OneeWESJmXBZwTB2cisM4NnOhDHjTiKRK3yKyZjg6uJKkb0Ty3D/cxGTYOXa9WSNNt3t0k aYvz4i4HGx4Xwv+qTAuBYMQwVvwvLbaNvnyUcBWh3fddLIx0rVDS69rvqkLbNxj/jzvE15 Ku9nap7TSCT6qRd6iPyedWgecHrDtcI6gYkAyXTj0JJ1iQLwoWjKwcLDXMI4nw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1673988111; a=rsa-sha256; cv=none; b=u0FthChUIgM07H4hjZyHVHH2v2oEi5IzFqqxwQWiQqW+gmP2qPLsZNoO5/Xvo9YL5DsFMy nTcIvtW0xuzTcXrkbTV3fR2atbfkbyfQKcJ24ozIR0uPtPlvxXEmWicxnROSoK9ktaL50E bZ/zTCkdCf1r8HTKQL60O6ua/l5XSUiFbZ8qWHFfw8wl4t9adGokvYZ6YWgySpy+u6vNZv L1vacNb4iNHT5MWGhUj+Z2subFWhQG0S4vFS6zXQH2qxjI6IR4dZdoeS2CzqoRv6ONahWB odALOXFu2m3BKtSdpdGF4CpG77RVqF3EHz7CEhzs8Noa0qpnkVAIXxqXu0S7EQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4NxLR35Bcxzlkd for ; Tue, 17 Jan 2023 20:41:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 30HKfpAI050578 for ; Tue, 17 Jan 2023 20:41:51 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 30HKfpWf050577 for apache@FreeBSD.org; Tue, 17 Jan 2023 20:41:51 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: apache@FreeBSD.org Subject: [Bug 269015] [PATCH] www/apache24: UPdate to 2.4.55 Date: Tue, 17 Jan 2023 20:41:51 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: cy@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: apache@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter flagtypes.name attachments.created Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Support of apache-related ports List-Archive: https://lists.freebsd.org/archives/freebsd-apache List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-apache@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D269015 Bug ID: 269015 Summary: [PATCH] www/apache24: UPdate to 2.4.55 Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: Individual Port(s) Assignee: apache@FreeBSD.org Reporter: cy@FreeBSD.org Assignee: apache@FreeBSD.org Flags: maintainer-feedback?(apache@FreeBSD.org) Created attachment 239542 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D239542&action= =3Dedit update to 2.4.55 fixing multiple vulnerabilities Fix multiple vulnerabilities. --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Tue Jan 17 20:56:48 2023 X-Original-To: apache@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4NxLmJ4qbFz2v3Mh for ; Tue, 17 Jan 2023 20:56:48 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4NxLmJ2tZbz3xLd for ; Tue, 17 Jan 2023 20:56:48 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1673989008; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=NQ/JKVp1tLFdnSlgb+0+ne1I6PkVPaynKpiH62CJc4s=; b=L/axl5FPyR55hufjy8wJ6FoeUniEEMruURwK5PxYo8ccKjGcPXzHcSS1cC002N9IdoR0EP KxArdXIM/3BSLx4H1RrNplYu0eIE+Og+r4sX5GWSCiIPMxax8IUYCtUJDOB9P7dJq9W4pj YIzeoSeCgqAMYHCYCYYfOinJWWUSCo0w0iGnKo2CIqTxRDzcPuK8/MvtkdoKRov+VzTfN5 RMoGGb2DRq7+O+3OwPo6dklys334QEuPZxw/XyiixMQHEJ0ksdju8T3aiDDI+Im3sW4nGw qpfJq7R86z5n2iH19rO/Q1cPsCOrmizc8TaA92T2HweSzWy1lcovFyRsBoUKBA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1673989008; a=rsa-sha256; cv=none; b=k5SwI8a7TwpS7y8qTtiLb0+0BrEOWHIFpbym2SeJYvPqz+l7TUgXvFne5UgnbFmUwpQp3b xImDvKzELf055OXAk8gAsQlzBP+WUm83/9xL2Me5txK7XG/ZNsklqMyT0693Is4ht4+rIc iFCAl3Iw3leXUn2+i4pQtEsoPQXRIPhPSUDMwVXpaRbKooRSj0XF82Z/bY5/tlpszmEtBQ CmnvZJPSnieo3el7Lznita1Dmp5PmP9Ks7QFu95/T4UKfVQjhCLlO1xIQwyUgcOWzSvvqT MEBW8ql1h+sXaGP8awVDTzxphbq7Yel5INCBSUFcXb4qYf++QblWEPn0gT9dHQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4NxLmJ1xk2zlp0 for ; Tue, 17 Jan 2023 20:56:48 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 30HKumx1074384 for ; Tue, 17 Jan 2023 20:56:48 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 30HKumwB074383 for apache@FreeBSD.org; Tue, 17 Jan 2023 20:56:48 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: apache@FreeBSD.org Subject: [Bug 258988] [PATCH] www/apache24 - Critical: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) (CVE-2021-42013) Date: Tue, 17 Jan 2023 20:56:48 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Many People X-Bugzilla-Who: cy@FreeBSD.org X-Bugzilla-Status: Closed X-Bugzilla-Resolution: FIXED X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: cy@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback+ merge-quarterly+ X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Support of apache-related ports List-Archive: https://lists.freebsd.org/archives/freebsd-apache List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-apache@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D258988 --- Comment #4 from Cy Schubert --- Patch committed to my local tree. I will push shortly. --=20 You are receiving this mail because: You are on the CC list for the bug.= From nobody Tue Jan 17 21:13:34 2023 X-Original-To: apache@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4NxM7g0mTrz2v5MV for ; Tue, 17 Jan 2023 21:13:35 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4NxM7f5PTLz4234 for ; Tue, 17 Jan 2023 21:13:34 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1673990014; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=J17TevOg/2FVVlAxxk5iMgysxly9NjulXQ0PtH/BDKw=; b=FaawhRtFpkpINjgETp1hTruAPUOqwsnxzbORf6p1mtl9X0DhUubTYZNLTiLshgYSOL68Ck zahwad5Z4eYeVifrwUC50E1g4GWO1ZnMpEAbgMP1qi4crpiCBi+9x5H+mj9R6YhfVGwEHQ IBGgfgd4xtXPXFOtq5owgT9YTQXirim7xAK4OymKlQQkel11VRvvpBrrnPBmRjzGcotCzJ QO7JaodsCcsHPcvD5dha5W0fj9vdO9ux/cRISMDrl0U0voPOg69iZMmAr9VgB9GW9XYpqD sb1bZqgSn67nCSaUzhD2kUBvecJms5G6nEVhgB3gChOv5sy3T4GrfP4v4DwdqQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1673990014; a=rsa-sha256; cv=none; b=gt/de6TU/cHNqmbszRRZWRqt9yDrjH39aMSn/3M19qqBCTFeVomQrH6k+q+qC2YWQoXRyA MHlOfYO3JbJBMur4I4POvhaCOeQXmrcyLF1DqUOpPLhDrLm69QzXJBS0hAzh/AaPQ96hYH 0wP2eY4b524rpTj1BLlZtrNVzkHnoXgVAy1B3PJsdpGokEUPT5k1EXPtVm0sXYnxqDLNsY hhk69vehE9GgwiTSdXHK2vbym3LH8kKlHUiJISDSXGFsXs3EV0XF3OUIXaNbNmFP54KTJu 30AIRpqOPJogcdvDtRb0mzncDH1wVzppxfe0SZNoJWCX8cqeF3frFJn+J2S3Bw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4NxM7f4SpLzm44 for ; Tue, 17 Jan 2023 21:13:34 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 30HLDY07004708 for ; Tue, 17 Jan 2023 21:13:34 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from bugzilla@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 30HLDYlU004707 for apache@FreeBSD.org; Tue, 17 Jan 2023 21:13:34 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: bugzilla set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: apache@FreeBSD.org Subject: [Bug 269015] [PATCH] www/apache24: UPdate to 2.4.55 Date: Tue, 17 Jan 2023 21:13:34 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: commit-hook@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: apache@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Support of apache-related ports List-Archive: https://lists.freebsd.org/archives/freebsd-apache List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-apache@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D269015 --- Comment #1 from commit-hook@FreeBSD.org --- A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=3D57ca2ea50da81d0223f6c3660a704f7= 098cac282 commit 57ca2ea50da81d0223f6c3660a704f7098cac282 Author: Cy Schubert AuthorDate: 2023-01-17 20:36:12 +0000 Commit: Cy Schubert CommitDate: 2023-01-17 21:12:13 +0000 www/apache24: Update to 2.4.55 Fixes multiple vulnerabilities. PR: 269015 MFH: 2023Q1 Security: 00919005-96a3-11ed-86e9-d4c9ef517024 CVE-2022-37436, CVE-2022-36760, CVE-2006-20001 www/apache24/Makefile | 2 +- www/apache24/distinfo | 6 +++--- www/apache24/pkg-plist | 1 + 3 files changed, 5 insertions(+), 4 deletions(-) --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Tue Jan 17 23:10:56 2023 X-Original-To: apache@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4NxPl42TNbz2p8bh for ; Tue, 17 Jan 2023 23:10:56 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4NxPl372Jxz4GBG for ; Tue, 17 Jan 2023 23:10:55 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1673997056; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=mZUWB3LFvJ5luzsuwWrCXFfy8/TWAmnMCicUv/OKpOY=; b=CqI9lKk3z1vrcQNTlXvpE0BY6gTrYI7qk2v+Kgbib2iUhkf++BY2uv7kd5nbBpw4EMTnJY TOkgaCDNQ059RSp3iAYeRUw71JcL7ssaoUHhL4IrknBBZw7Cxw/pFH6zTiApNmoyQ1bvBU fqlthgPlyTRGD8xHewitU8CphiLj9vUgsS/Myzym5qOFOn633vpFkgh6NgRqJ0sksModG9 YLKQs0ZIU7IlGQFZbf4C9h0906MP8vrmUb8cUijgWsNOfAUq3Oto1ctfLOs65DN3jY50Sg XU3Vx2D7oRmwIrAxWz+pCk9y8k0MoAP1mZD2RINicSg9JHbLEgn2Tdo5lEEZ1Q== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1673997056; a=rsa-sha256; cv=none; b=u9lFuMmhZpVVyiXy3F9jJLCwpPQzxWoGXLuCcQIq1t2V/MGUw+QG5WO3BrS/BjtTbsazlb juOab/OumhxXmVT3m9+s5M2gLm7z7E9n6f5CvVTKGpL75AOvIddhg6RoDdD2gR+dWmnU5j EqGXuM/hiv5lFExmBaOe0hvazHHuESUly2p8X7UKttbWJDRivrTh5Cgw3FfNrZReZREwmv 6Fza5uXK10si8XuRqm/OryaImnKn1uSyiUZVKEmQWX2JY+KlHY8sxFrh2PdUR85jhVtz84 dDwxSnzC4LRXa1YCHSAeJXKgj8yOSDejMqWwk+lYFwAKcnJtM/beUQsJtjNhlA== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4NxPl365D1zpj2 for ; Tue, 17 Jan 2023 23:10:55 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 30HNAth4078687 for ; Tue, 17 Jan 2023 23:10:55 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from bugzilla@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 30HNAt8Y078684 for apache@FreeBSD.org; Tue, 17 Jan 2023 23:10:55 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: bugzilla set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: apache@FreeBSD.org Subject: [Bug 269015] [PATCH] www/apache24: UPdate to 2.4.55 Date: Tue, 17 Jan 2023 23:10:56 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: commit-hook@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: apache@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Support of apache-related ports List-Archive: https://lists.freebsd.org/archives/freebsd-apache List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-apache@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D269015 --- Comment #2 from commit-hook@FreeBSD.org --- A commit in branch 2023Q1 references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=3D0d6517d860aa56a7c4e2e976c10ff85= 16a4857f9 commit 0d6517d860aa56a7c4e2e976c10ff8516a4857f9 Author: Cy Schubert AuthorDate: 2023-01-17 20:36:12 +0000 Commit: Cy Schubert CommitDate: 2023-01-17 23:10:00 +0000 www/apache24: Update to 2.4.55 Fixes multiple vulnerabilities. PR: 269015 Security: 00919005-96a3-11ed-86e9-d4c9ef517024 CVE-2022-37436, CVE-2022-36760, CVE-2006-20001 (cherry picked from commit 57ca2ea50da81d0223f6c3660a704f7098cac282) www/apache24/Makefile | 2 +- www/apache24/distinfo | 6 +++--- www/apache24/pkg-plist | 1 + 3 files changed, 5 insertions(+), 4 deletions(-) --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Wed Jan 18 06:32:38 2023 X-Original-To: apache@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4NxbXk6NmFz2v39V for ; Wed, 18 Jan 2023 06:32:38 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4NxbXk4wB2z3kG9 for ; Wed, 18 Jan 2023 06:32:38 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1674023558; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=htbK624oGXEm6TsD+TQvBPfD7pgtYxVesGUGdaKEbjs=; b=miyuf0JXLzg3PpkSouv9eTCbOD3dhGjPVe30c4b/5hOLPw6Of1G5ho/HdlbRk0Sh+HvwHw P6kKMJ6ZFuiOY1okqVQFceeZDtwCz8SBBQNT51BFeMA+OrUrsMIdMNXtsKHDIgJycwGcqK 3ijtA6woHWWlKYubmToW6zP9quaFw2YOBiwpJSZlW17L8nAMxUwTV1lSYCrZIcwiKHHuEV VVQWDh1q69KM/N1re3rzlW89OWExOfo6+shGN/QHZUeZkhdlvMkts6CSYXQCUxm5E+/doZ nUGuI2KDxN0C/g+iCyD0GeOIv36OcoJtSrEuf5BZBtraACHYAEnQyziDQMB4Dg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1674023558; a=rsa-sha256; cv=none; b=sjIOJICdbuUDlEHdc5/tKf3sxQzKYtVLiyknD8MGONvp0JbzmdZ32Xn2/XLDxL3cEOOCFm hDerz/nVuhbqF+CKt7plaIXvfEcVzqlVenc19wrqrubI1oERh4tcjpIVrPxVmR7iiNrRrZ TN8DldfTMUjpfzuPojUbuWTBT62vs9r1AuICJ7f7lwgFqhx7gFGpBqQyJQY+z1ERH3WGyd YbwvGRYlboUBHgiWMxHnWLaxV42gI7r1HtK1j623C/e19fyZ83AGcHps7COb0R4rEPIDWG 5QVLRh/czHA/KbTaejf9HVIJuyqGHnhrkXjLtn4yepLrcx1P3HNjceOe152Ixw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4NxbXk3zjRz120K for ; Wed, 18 Jan 2023 06:32:38 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 30I6WcUR064943 for ; Wed, 18 Jan 2023 06:32:38 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 30I6Wcah064942 for apache@FreeBSD.org; Wed, 18 Jan 2023 06:32:38 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: apache@FreeBSD.org Subject: [Bug 269015] [PATCH] www/apache24: UPdate to 2.4.55 Date: Wed, 18 Jan 2023 06:32:38 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: joneum@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: apache@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Support of apache-related ports List-Archive: https://lists.freebsd.org/archives/freebsd-apache List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-apache@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D269015 Jochen Neumeister changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |joneum@FreeBSD.org --- Comment #3 from Jochen Neumeister --- for the documentation: this has not been released by the Apache team and it is not a timeout. --=20 You are receiving this mail because: You are the assignee for the bug.=