Date: Sat, 22 Mar 2014 21:30:10 -0000 From: "Ports-QAT" <qat@redports.org> To: ohauer@FreeBSD.org Cc: ports@FreeBSD.org, decke@FreeBSD.org Subject: [QAT] 348808: 2x leftovers, 4x success Message-ID: <E1WRTUY-000P4N-8g@qat.redports.org>
next in thread | raw e-mail | index | archive | help
- update to 2.4.9
- enforcing use libapr-1.so.5 (apr-1.5.0 instead apr-1.4.8)
Changes with Apache 2.4.9
*) mod_ssl: Work around a bug in some older versions of OpenSSL that
would cause a crash in SSL_get_certificate for servers where the
certificate hadn't been sent. [Stephen Henson]
*) mod_lua: Add a fixups hook that checks if the original request is intended
for LuaMapHandler. This fixes a bug where FallbackResource invalidates the
LuaMapHandler directive in certain cases by changing the URI before the map
handler code executes [Daniel Gruno, Daniel Ferradal <dferradal gmail com>].
Changes with Apache 2.4.8
*) SECURITY: CVE-2014-0098 (cve.mitre.org)
Clean up cookie logging with fewer redundant string parsing passes.
Log only cookies with a value assignment. Prevents segfaults when
logging truncated cookies.
[William Rowe, Ruediger Pluem, Jim Jagielski]
*) SECURITY: CVE-2013-6438 (cve.mitre.org)
mod_dav: Keep track of length of cdata properly when removing
leading spaces. Eliminates a potential denial of service from
specifically crafted DAV WRITE requests
[Amin Tora <Amin.Tora neustar.biz>]
*) core: Support named groups and backreferences within the LocationMatch,
DirectoryMatch, FilesMatch and ProxyMatch directives. (Requires
non-ancient PCRE library) [Graham Leggett]
*) core: draft-ietf-httpbis-p1-messaging-23 corrections regarding
TE/CL conflicts. [Yann Ylavic <ylavic.dev gmail com>, Jim Jagielski]
*) mod_dir: Add DirectoryCheckHandler to allow a 2.2-like behavior, skipping
execution when a handler is already set. PR53929. [Eric Covener]
*) mod_ssl: Do not perform SNI / Host header comparison in case of a
forward proxy request. [Ruediger Pluem]
*) mod_ssl: Remove the hardcoded algorithm-type dependency for the
SSLCertificateFile and SSLCertificateKeyFile directives, to enable
future algorithm agility, and deprecate the SSLCertificateChainFile
directive (obsoleted by SSLCertificateFile). [Kaspar Brand]
*) mod_rewrite: Add RewriteOptions InheritDown, InheritDownBefore,
and IgnoreInherit to allow RewriteRules to be pushed from parent scopes
to child scopes without explicitly configuring each child scope.
PR56153. [Edward Lu <Chaosed0 gmail com>]
*) prefork: Fix long delays when doing a graceful restart.
PR 54852 [Jim Jagielski, Arkadiusz Miskiewicz <arekm maven pl>]
*) FreeBSD: Disable IPv4-mapped listening sockets by default for versions
5+ instead of just for FreeBSD 5. PR 53824. [Jeff Trawick]
*) mod_proxy_wstunnel: Avoid busy loop on client errors, drop message
IDs 02445, 02446, and 02448 to TRACE1 from DEBUG. PR 56145.
[Joffroy Christen <joffroy.christen solvaxis com>, Eric Covener]
*) mod_remoteip: Correct the trusted proxy match test. PR 54651.
[Yoshinori Ehara <yoshinori ehara gmail com>, Eugene L <eugenel amazon com>]
*) mod_proxy_fcgi: Fix error message when an unexpected protocol version
number is received from the application. PR 56110. [Jeff Trawick]
*) mod_remoteip: Use the correct IP addresses to populate the proxy_ips field.
PR 55972. [Mike Rumph]
*) mod_lua: Update r:setcookie() to accept a table of options and add domain,
path and httponly to the list of options available to set.
PR 56128 [Edward Lu <Chaosed0 gmail com>, Daniel Gruno]
*) mod_lua: Fix r:setcookie() to add, rather than replace,
the Set-Cookie header. PR56105
[Kevin J Walters <kjw ms com>, Edward Lu <Chaosed0 gmail com>]
*) mod_lua: Allow for database results to be returned as a hash with
row-name/value pairs instead of just row-number/value. [Daniel Gruno]
*) mod_rewrite: Add %{CONN_REMOTE_ADDR} as the non-useragent counterpart to
%{REMOTE_ADDR}. PR 56094. [Edward Lu <Chaosed0 gmail com>]
*) WinNT MPM: If ap_run_pre_connection() fails or sets c->aborted, don't
save the socket for reuse by the next worker as if it were an
APR_SO_DISCONNECTED socket. Restores 2.2 behavior. [Er
---------------------------------------------------------------------
Build ID: 20140322212000-24643
Job owner: ohauer@FreeBSD.org
Buildtime: 10 minutes
Enddate: Sat, 22 Mar 2014 21:30:08 GMT
Revision: 348808
Repository: https://svnweb.freebsd.org/ports?view=revision&revision=348808
---------------------------------------------------------------------
Port: www/apache24
Buildgroup: 10.0-QAT/amd64
Buildstatus: LEFTOVERS
Log: https://qat.redports.org//~ohauer@FreeBSD.org/20140322212000-24643-305680/apache24-2.4.9.log
Buildgroup: 10.0-QAT/i386
Buildstatus: LEFTOVERS
Log: https://qat.redports.org//~ohauer@FreeBSD.org/20140322212000-24643-305681/apache24-2.4.9.log
Buildgroup: 8.4-QAT/amd64
Buildstatus: SUCCESS
Log: https://qat.redports.org//~ohauer@FreeBSD.org/20140322212000-24643-305682/apache24-2.4.9.log
Buildgroup: 8.4-QAT/i386
Buildstatus: SUCCESS
Log: https://qat.redports.org//~ohauer@FreeBSD.org/20140322212000-24643-305683/apache24-2.4.9.log
Buildgroup: 9.2-QAT/amd64
Buildstatus: SUCCESS
Log: https://qat.redports.org//~ohauer@FreeBSD.org/20140322212000-24643-305684/apache24-2.4.9.log
Buildgroup: 9.2-QAT/i386
Buildstatus: SUCCESS
Log: https://qat.redports.org//~ohauer@FreeBSD.org/20140322212000-24643-305685/apache24-2.4.9.log
--
Buildarchive URL: <https://qat.redports.org/buildarchive/20140322212000-24643>;
redports <https://qat.redports.org/>;
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E1WRTUY-000P4N-8g>