From owner-freebsd-apache@FreeBSD.ORG Thu Sep 15 05:10:10 2011 Return-Path: Delivered-To: apache@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 36684106564A for ; Thu, 15 Sep 2011 05:10:10 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 22B2D8FC08 for ; Thu, 15 Sep 2011 05:10:10 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id p8F5AAcC035621 for ; Thu, 15 Sep 2011 05:10:10 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id p8F5A9Em035620; Thu, 15 Sep 2011 05:10:10 GMT (envelope-from gnats) Date: Thu, 15 Sep 2011 05:10:10 GMT Message-Id: <201109150510.p8F5A9Em035620@freefall.freebsd.org> To: apache@FreeBSD.org From: dfilter@FreeBSD.ORG (dfilter service) Cc: Subject: Re: ports/160743: commit references a PR X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: dfilter service List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Sep 2011 05:10:10 -0000 The following reply was made to PR ports/160743; it has been noted by GNATS. From: dfilter@FreeBSD.ORG (dfilter service) To: bug-followup@FreeBSD.org Cc: Subject: Re: ports/160743: commit references a PR Date: Thu, 15 Sep 2011 05:00:38 +0000 (UTC) ohauer 2011-09-15 05:00:28 UTC FreeBSD ports repository Modified files: www/apache22 Makefile distinfo Log: - update to version 2.2.21 Addresses: * SECURITY: CVE-2011-3348 (cve.mitre.org) mod_proxy_ajp when combined with mod_proxy_balancer: Prevents unrecognized HTTP methods from marking ajp: balancer members in an error state, avoiding denial of service. * SECURITY: CVE-2011-3192 (cve.mitre.org) core: Further fixes to the handling of byte-range requests to use less memory, to avoid denial of service. This patch includes fixes to the patch introduced in release 2.2.20 for protocol compliance, as well as the MaxRanges directive. PR: ports/160743 Submitted by: Jason Helfman Revision Changes Path 1.293 +2 -2 ports/www/apache22/Makefile 1.86 +2 -2 ports/www/apache22/distinfo _______________________________________________ cvs-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/cvs-all To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"