From owner-cvs-ports@FreeBSD.ORG  Wed Aug 18 19:40:08 2004
Return-Path: <owner-cvs-ports@FreeBSD.ORG>
Delivered-To: cvs-ports@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 3B17C16A4CE; Wed, 18 Aug 2004 19:40:08 +0000 (GMT)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 316CD43D2F; Wed, 18 Aug 2004 19:40:08 +0000 (GMT)
	(envelope-from clement@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.11/8.12.11) with ESMTP id i7IJe8ar092411;
	Wed, 18 Aug 2004 19:40:08 GMT
	(envelope-from clement@repoman.freebsd.org)
Received: (from clement@localhost)
	by repoman.freebsd.org (8.12.11/8.12.11/Submit) id i7IJe7PO092410;
	Wed, 18 Aug 2004 19:40:07 GMT
	(envelope-from clement)
Message-Id: <200408181940.i7IJe7PO092410@repoman.freebsd.org>
From: Clement Laforet <clement@FreeBSD.org>
Date: Wed, 18 Aug 2004 19:40:07 +0000 (UTC)
To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org,
	cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: ports/www/apache2 Makefile ports/www/apache2/files
 patch-secfix-modules:ssl:ssl_engine_io.c
X-BeenThere: cvs-ports@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the ports tree <cvs-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-ports>
List-Post: <mailto:cvs-ports@freebsd.org>
List-Help: <mailto:cvs-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Aug 2004 19:40:08 -0000

clement     2004-08-18 19:40:07 UTC

  FreeBSD ports repository

  Modified files:
    www/apache2          Makefile 
  Added files:
    www/apache2/files    patch-secfix-modules:ssl:ssl_engine_io.c 
  Log:
  - Backport security fixes in ssl_engine_io.c
  
  * [SECURITY] mod_ssl: Fix potential input filter segfaults in
    SPECULATIVE mode. (rollback handling for AP_MODE_SPECULATIVE)
    "This issue has possible security implications; it's been assigned CVE
    CAN-2004-0751 (cve.mitre.org)."
    http://issues.apache.org/bugzilla/show_bug.cgi?id=30134
  
  * [SECURITY] mod_ssl: Fix potential infinite loop.
    (potential infinite loop in ssl_io_input_getline if connection is
    aborted without inctx->rc being set.)
    http://issues.apache.org/bugzilla/show_bug.cgi?id=27945
    http://issues.apache.org/bugzilla/show_bug.cgi?id=29690
  
  Obtained from:  Apache CVS (httpd-2.0 HEAD)
  
  Revision  Changes    Path
  1.197     +1 -1      ports/www/apache2/Makefile
  1.1       +34 -0     ports/www/apache2/files/patch-secfix-modules:ssl:ssl_engine_io.c (new)