From owner-freebsd-apache@FreeBSD.ORG Thu Mar 18 17:37:13 2010 Return-Path: Delivered-To: apache@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8590B106566C for ; Thu, 18 Mar 2010 17:37:13 +0000 (UTC) (envelope-from pgollucci@p6m7g8.com) Received: from EXHUB015-4.exch015.msoutlookonline.net (exhub015-4.exch015.msoutlookonline.net [207.5.72.96]) by mx1.freebsd.org (Postfix) with ESMTP id 6EB458FC17 for ; Thu, 18 Mar 2010 17:37:13 +0000 (UTC) Received: from [192.168.5.30] (64.134.66.219) by smtpx15.msoutlookonline.net (207.5.72.103) with Microsoft SMTP Server (TLS) id 8.2.176.0; Thu, 18 Mar 2010 10:37:12 -0700 Message-ID: <4BA264C6.80903@p6m7g8.com> Date: Thu, 18 Mar 2010 13:37:10 -0400 From: "Philip M. Gollucci" Organization: P6 Web Applications User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.8) Gecko/20100227 Lightning/1.0b1 Thunderbird/3.0.3 MIME-Version: 1.0 To: Chris References: <020701cac555$9f1c3b40$dd54b1c0$@org> <4BA01237.30500@p6m7g8.com> <4BA01288.8090206@p6m7g8.com> <020c01cac55f$ef4a0110$cdde0330$@org> <4BA01526.30809@p6m7g8.com> <020e01cac562$6d84b140$488e13c0$@org> <4BA01A20.4070804@p6m7g8.com> <028701cac6a9$c22cd090$468671b0$@org> In-Reply-To: <028701cac6a9$c22cd090$468671b0$@org> Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Cc: apache@freebsd.org Subject: Re: FreeBSD Port: www/apache22 X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Mar 2010 17:37:13 -0000 On 3/18/2010 10:46 AM, Chris wrote: > hi again. > > is it not possible to bump apache without updating apr? using the same apr Yes, but it is untested. > as in 2.2.14? I see 4 security notices against 2.2.14 which makes me > worried. I thought freebsd ports allowed commits for security reasons > during a freeze/slush. Yes, they do. I'd wagger you're not using any of the modules that are vulnerable. If you are really in a rush, you are welcome to submit patches. As for me, back to vacation!