Date: Wed, 11 Apr 2018 13:30:28 -0700 From: "Philip M. Gollucci" <pgollucci@p6m7g8.com> To: spil.oss@gmail.com Cc: ports <freebsd-ports@freebsd.org>, "apache@FreeBSD.org" <apache@freebsd.org> Subject: Re: Removal of www/apache22 Message-ID: <CACM2dAZMFXzMx2=LkBkF0052QM64JEP3cAkXQ=xZp=_P5VfeTg@mail.gmail.com> In-Reply-To: <CAEJyAvOr=Efc8snF52BLnDrLzS3giin9cnfBv9uDM7mL5iF11Q@mail.gmail.com> References: <f013fd38b474b5547dfd6b6e7e21dbce@freebsd.org> <7a0002af-57f4-c5dd-b43e-402f3a0913eb@unsane.co.uk> <CAEJyAvMiw=yr5k5MpX8GXQYedc_FJ=qxjd-jg9%2B=uyX94tij7w@mail.gmail.com> <CAEJyAvOr=Efc8snF52BLnDrLzS3giin9cnfBv9uDM7mL5iF11Q@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
#winning! On Sun, Apr 8, 2018 at 3:52 AM, Spil Oss <spil.oss@gmail.com> wrote: > There's been no-one wanting to keep Apache 2.2 that has come forward. > > Expect www/apache22 to be removed later in the week. Cleanup of > Mk/Uses/apache.mk after that. > > 2018-03-30 17:37 GMT+02:00 Spil Oss <spil.oss@gmail.com>: > > Thanks Vincent! I was looking for these but could not find them any > > more. Should've looked in archive naturally. > > > > Hanging in here for a bit to find out if there's anyone else wanting > > to comment. Deletion 14 days after original message. > > > > Cheers, Bernard. > > > > 2018-03-27 16:07 GMT+02:00 Vincent Hoffman-Kazlauskas < > vince@unsane.co.uk>: > >> > >> > >> On 27/03/2018 13:52, Bernard Spil wrote: > >>> Hi all, > >>> > >>> Just noticed that the Apache project has removed the patches they had > >>> for 2.2.34. > >>> > >>> http://www.apache.org/dist/httpd/patches/apply_to_2.2.34/ > >>> > >>> Combined with the security update of 2.4 branch to 2.4.33 leads me to > >>> believe that Apache 2.2 is now vulnerable and no patches will be > provided. > >>> > >>> If someone wishes to step up and get patches for 2.2 from e.g. RedHat, > >>> we may be able to keep the port alive for a bit longer. If no one steps > >>> up, I see no other way forward than to delete the port as indicated by > >>> the DEPRECATED variable and expiration date 2017-07-01 since July 2016. > >>> > >> > >> While I agree that apache 2.2 is now firmly dead, they moved the patches > >> for 2.2.34 to > >> https://archive.apache.org/dist/httpd/patches/apply_to_2.2.34/ , > however > >> no new patches for the recent CVEs were added. > >> > >> > >> Vince > >> > >> > >> > >>> Cheers, > >>> > >>> Bernard. > >>> _______________________________________________ > >>> freebsd-ports@freebsd.org mailing list > >>> https://lists.freebsd.org/mailman/listinfo/freebsd-ports > >>> To unsubscribe, send any mail to "freebsd-ports-unsubscribe@ > freebsd.org" > >> _______________________________________________ > >> freebsd-ports@freebsd.org mailing list > >> https://lists.freebsd.org/mailman/listinfo/freebsd-ports > >> To unsubscribe, send any mail to "freebsd-ports-unsubscribe@freebsd.org > " > _______________________________________________ > freebsd-apache@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-apache > To unsubscribe, send any mail to "freebsd-apache-unsubscribe@freebsd.org" > -- --------------------------------------------------------------------------------- 4096R/D21D2752 <http://pgp.mit.edu/pks/lookup?op=get&search=0xF699A450D21D2752> ECDF B597 B54B 7F92 753E E0EA F699 A450 D21D 2752 Philip M. Gollucci (pgollucci@p6m7g8.com) c: 703.336.9354 Member, Apache Software Foundation Committer, FreeBSD Foundation Consultant, P6M7G8 Inc. Director Cloud Technology, Capital One What doesn't kill us can only make us stronger; Except it almost kills you.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CACM2dAZMFXzMx2=LkBkF0052QM64JEP3cAkXQ=xZp=_P5VfeTg>