Date: Wed, 15 Sep 2004 16:54:37 +0000 (UTC) From: Clement Laforet <clement@FreeBSD.org> To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports/www/apache2 Makefile Makefile.doc patch-secfix-modules:dav:fs:lock.c patch-secfix-srclib:apr-util:test:testuri.c Message-ID: <200409151654.i8FGsbDV087534@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
clement 2004-09-15 16:54:37 UTC
FreeBSD ports repository
Modified files:
www/apache2 Makefile Makefile.doc
Makefile.modules.3rd
Added files:
www/apache2/files patch-secfix-modules:dav:fs:lock.c
patch-secfix-server:utils.c
patch-secfix-srclib:apr-util:test:testuri.c
Log:
Security fixes [1]:
*) SECURITY: CAN-2004-0786 (cve.mitre.org)
Fix an input validation issue in apr-util which could be
triggered by malformed IPv6 literal addresses. [Joe Orton]
*) SECURITY: CAN-2004-0747 (cve.mitre.org)
Fix buffer overflow in expansion of environment variables in
configuration file parsing. [Andr<E9> Malo]
*) SECURITY: CAN-2004-0809 (cve.mitre.org)
mod_dav_fs: Fix a segfault in the handling of an indirect lock
refresh. PR 31183. [Joe Orton]
- Update documentation (finally!) and fix WITH_<CATEGORY>_MODULES
for special modules like LDAP or SSL [2]
Noticed by: nectar [1]
Requested by: Emile Heitor <imil at home dot imil dot net> [2]
Approved by: portmgr (marcus)
Revision Changes Path
1.199 +17 -3 ports/www/apache2/Makefile
1.10 +23 -18 ports/www/apache2/Makefile.doc
1.11 +2 -2 ports/www/apache2/Makefile.modules.3rd
1.1 +46 -0 ports/www/apache2/files/patch-secfix-modules:dav:fs:lock.c (new)
1.1 +132 -0 ports/www/apache2/files/patch-secfix-server:utils.c (new)
1.1 +33 -0 ports/www/apache2/files/patch-secfix-srclib:apr-util:test:testuri.c (new)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200409151654.i8FGsbDV087534>