From owner-freebsd-apache@FreeBSD.ORG Sun Jun 10 23:27:13 2012 Return-Path: Delivered-To: apache@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id DC9AC106566C; Sun, 10 Jun 2012 23:27:13 +0000 (UTC) (envelope-from linimon@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id ACFC58FC1D; Sun, 10 Jun 2012 23:27:13 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.5/8.14.5) with ESMTP id q5ANRDhW046069; Sun, 10 Jun 2012 23:27:13 GMT (envelope-from linimon@freefall.freebsd.org) Received: (from linimon@localhost) by freefall.freebsd.org (8.14.5/8.14.5/Submit) id q5ANRDwH046065; Sun, 10 Jun 2012 23:27:13 GMT (envelope-from linimon) Date: Sun, 10 Jun 2012 23:27:13 GMT Message-Id: <201206102327.q5ANRDwH046065@freefall.freebsd.org> To: linimon@FreeBSD.org, freebsd-www@FreeBSD.org, apache@FreeBSD.org From: linimon@FreeBSD.org Cc: Subject: Re: ports/168668: www/mod_webkit does not link against marshal.c X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Jun 2012 23:27:14 -0000 Old Synopsis: mod_webkit does not link against marshal.c New Synopsis: www/mod_webkit does not link against marshal.c Responsible-Changed-From-To: freebsd-www->apache Responsible-Changed-By: linimon Responsible-Changed-When: Sun Jun 10 23:26:18 UTC 2012 Responsible-Changed-Why: make this a ports PR and assign. http://www.freebsd.org/cgi/query-pr.cgi?pr=168668 From owner-freebsd-apache@FreeBSD.ORG Mon Jun 11 11:06:22 2012 Return-Path: Delivered-To: apache@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 41199106566B for ; Mon, 11 Jun 2012 11:06:22 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id E460A8FC14 for ; Mon, 11 Jun 2012 11:06:21 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.5/8.14.5) with ESMTP id q5BB6LcO052570 for ; Mon, 11 Jun 2012 11:06:21 GMT (envelope-from owner-bugmaster@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.5/8.14.5/Submit) id q5BB6LK3052566 for apache@FreeBSD.org; Mon, 11 Jun 2012 11:06:21 GMT (envelope-from owner-bugmaster@FreeBSD.org) Date: Mon, 11 Jun 2012 11:06:21 GMT Message-Id: <201206111106.q5BB6LK3052566@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: gnats set sender to owner-bugmaster@FreeBSD.org using -f From: FreeBSD bugmaster To: apache@FreeBSD.org Cc: Subject: Current problem reports assigned to apache@FreeBSD.org X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Jun 2012 11:06:22 -0000 Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker Resp. Description -------------------------------------------------------------------------------- o ports/168819 apache [PATCH] www/mod_perl2: update to 2.0.7,3 o ports/168769 apache [PATCH] www/apache22: Add SuexecUserdir support o ports/168710 apache [PATCH] www/mod_auth_cas: update to 1.0.9.1 o ports/168668 apache www/mod_webkit does not link against marshal.c o ports/168514 apache www/mod_perl2: allow build with clang/gcc47+ o ports/167965 apache if to make port (www/apache22) with an option: WITH_AL o ports/167964 apache New port:www/mod_authn_otp o ports/166488 apache [PATCH] www/mod_auth_imap2: add dovecot patch o ports/159608 apache www/apache22: apache WITH_BDB_BASE settings described o ports/158565 apache www/apache22: Add rlimits based on login class for mpm o ports/157554 apache www/apache22: Apache RLimitNPROC does not work as inte o ports/156787 apache www/mod_auth_kerb2 fails on undefined symbol with base o ports/153406 apache www/apache22's SUEXEC_RSRCLIMIT option does not take e o ports/147282 apache errors when starting www/apache22 after installation o o ports/137729 apache www/mod_auth_kerb2 port broken on 8.0-BETA2 due to sec o ports/130479 apache www/apache22 configure_args busted o ports/125183 apache www/apache22 wrong SUEXEC_DOCROOT o ports/124375 apache security/heimdal: www/mod_auth_kerb doesn't compile ag 18 problems total. From owner-freebsd-apache@FreeBSD.ORG Tue Jun 12 16:09:14 2012 Return-Path: Delivered-To: apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 977B6106564A for ; Tue, 12 Jun 2012 16:09:14 +0000 (UTC) (envelope-from feld@feld.me) Received: from feld.me (unknown [IPv6:2607:f4e0:100:300::2]) by mx1.freebsd.org (Postfix) with ESMTP id 4282D8FC15 for ; Tue, 12 Jun 2012 16:09:14 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=feld.me; s=blargle; h=Message-Id:From:Content-Transfer-Encoding:Mime-Version:Date:Subject:To:Content-Type; bh=ea3meSJGBe3mqRxG8OE/pEr4w8TkKd27Iy/K/RVl4xU=; b=lEn8HafRvc8oFEoDyCPRd+z34sHHRJAxbUUn/T+RUKVLA1c8pK3dcudKfMohoe0cIpkTTI756QLMAWnFtiIIfqVVuSRerR6fLkx06fNQRh9drk5kPC5UHVMSIRW9bUiJ; Received: from localhost ([127.0.0.1] helo=mwi1.coffeenet.org) by feld.me with esmtp (Exim 4.77 (FreeBSD)) (envelope-from ) id 1SeTeW-000BUO-Do for apache@freebsd.org; Tue, 12 Jun 2012 11:09:13 -0500 Received: from feld@feld.me by mwi1.coffeenet.org (Archiveopteryx 3.1.4) with esmtpa id 1339517342-26372-26371/5/70; Tue, 12 Jun 2012 16:09:02 +0000 Content-Type: text/plain; charset=utf-8; format=flowed; delsp=yes To: apache@freebsd.org Date: Tue, 12 Jun 2012 11:09:01 -0500 Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable From: Mark Felder Message-Id: User-Agent: Opera Mail/11.64 (FreeBSD) X-SA-Score: -1.0 Cc: Subject: Apache 2.2.22 and CVE-2012-0883 X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jun 2012 16:09:14 -0000 Is there a reason why Apache 2.2.22 was skipped for CVE-2012-0883? = Clearly =20 it should be marked as vulnerable. http://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2012-0883 Apache 2.4.2 fixing the issue: =20 http://svn.apache.org/viewvc?view=3Drevision&revision=3D1296428 Apache 2.2.22 with it still vuln: =20 http://svn.apache.org/viewvc/httpd/httpd/tags/2.2.22/support/envvars-std.= in?revision=3D1235965&view=3Dmarkup&pathrev=3D1296428 Can we agree to get this into VUXML and prod upstream to actually do =20 something about this? We have annoying customers with (as expected) = awful =20 PCI compliance scans that are picking this up (because they liberally =20 allow anyone to know what version they run) and demanding they upgrade = to =20 the nonexistant 2.2.23. Thanks!