From owner-freebsd-ports@freebsd.org Tue Mar 27 14:07:17 2018 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 39487F56F1E for ; Tue, 27 Mar 2018 14:07:17 +0000 (UTC) (envelope-from vince@unsane.co.uk) Received: from unsane.co.uk (unsane-pt.tunnel.tserv5.lon1.ipv6.he.net [IPv6:2001:470:1f08:110::2]) by mx1.freebsd.org (Postfix) with ESMTP id CEAAD87263 for ; Tue, 27 Mar 2018 14:07:16 +0000 (UTC) (envelope-from vince@unsane.co.uk) Received: from Vincents-MacBook-Pro-2.local (vhoffman.plus.com [81.174.148.213]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by unsane.co.uk (Postfix) with ESMTPSA id 1EC1C3001C for ; Tue, 27 Mar 2018 15:07:16 +0100 (BST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=unsane.co.uk; s=251017; t=1522159636; bh=6Rtmv7s3GzQseVulES2w9mCeudzGzgji/2Cj9XJMNjA=; h=Subject:To:References:From:Date:In-Reply-To; b=enmZ/J5tSPp/ryropMWIQkLpp6ty7NBy0DUv31lY91F5sjyH3PMfmoYyLMs1Zu3eo poeOfLhx1dBQunQMXwi6A/Qh8D4kF8HLzC/kRNTMdQV5fuhRdtHLfCsiWWvtnNHu1L i9bidMzihHrXKzQ41WWVYv8iWWJNuPaDjbIeMqZs= Subject: Re: Removal of www/apache22 To: freebsd-ports@freebsd.org References: From: Vincent Hoffman-Kazlauskas Message-ID: <7a0002af-57f4-c5dd-b43e-402f3a0913eb@unsane.co.uk> Date: Tue, 27 Mar 2018 15:07:15 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-GB Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Mar 2018 14:07:17 -0000 On 27/03/2018 13:52, Bernard Spil wrote: > Hi all, > > Just noticed that the Apache project has removed the patches they had > for 2.2.34. > >     http://www.apache.org/dist/httpd/patches/apply_to_2.2.34/ > > Combined with the security update of 2.4 branch to 2.4.33 leads me to > believe that Apache 2.2 is now vulnerable and no patches will be provided. > > If someone wishes to step up and get patches for 2.2 from e.g. RedHat, > we may be able to keep the port alive for a bit longer. If no one steps > up, I see no other way forward than to delete the port as indicated by > the DEPRECATED variable and expiration date 2017-07-01 since July 2016. > While I agree that apache 2.2 is now firmly dead, they moved the patches for 2.2.34 to https://archive.apache.org/dist/httpd/patches/apply_to_2.2.34/ , however no new patches for the recent CVEs were added. Vince > Cheers, > > Bernard. > _______________________________________________ > freebsd-ports@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-ports > To unsubscribe, send any mail to "freebsd-ports-unsubscribe@freebsd.org"