From owner-freebsd-ports@freebsd.org  Tue Mar 27 14:07:17 2018
Return-Path: <owner-freebsd-ports@freebsd.org>
Delivered-To: freebsd-ports@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 39487F56F1E
 for <freebsd-ports@mailman.ysv.freebsd.org>;
 Tue, 27 Mar 2018 14:07:17 +0000 (UTC)
 (envelope-from vince@unsane.co.uk)
Received: from unsane.co.uk (unsane-pt.tunnel.tserv5.lon1.ipv6.he.net
 [IPv6:2001:470:1f08:110::2])
 by mx1.freebsd.org (Postfix) with ESMTP id CEAAD87263
 for <freebsd-ports@freebsd.org>; Tue, 27 Mar 2018 14:07:16 +0000 (UTC)
 (envelope-from vince@unsane.co.uk)
Received: from Vincents-MacBook-Pro-2.local (vhoffman.plus.com
 [81.174.148.213])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (No client certificate requested)
 by unsane.co.uk (Postfix) with ESMTPSA id 1EC1C3001C
 for <freebsd-ports@freebsd.org>; Tue, 27 Mar 2018 15:07:16 +0100 (BST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=unsane.co.uk;
 s=251017; t=1522159636;
 bh=6Rtmv7s3GzQseVulES2w9mCeudzGzgji/2Cj9XJMNjA=;
 h=Subject:To:References:From:Date:In-Reply-To;
 b=enmZ/J5tSPp/ryropMWIQkLpp6ty7NBy0DUv31lY91F5sjyH3PMfmoYyLMs1Zu3eo
 poeOfLhx1dBQunQMXwi6A/Qh8D4kF8HLzC/kRNTMdQV5fuhRdtHLfCsiWWvtnNHu1L
 i9bidMzihHrXKzQ41WWVYv8iWWJNuPaDjbIeMqZs=
Subject: Re: Removal of www/apache22
To: freebsd-ports@freebsd.org
References: <f013fd38b474b5547dfd6b6e7e21dbce@freebsd.org>
From: Vincent Hoffman-Kazlauskas <vince@unsane.co.uk>
Message-ID: <7a0002af-57f4-c5dd-b43e-402f3a0913eb@unsane.co.uk>
Date: Tue, 27 Mar 2018 15:07:15 +0100
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0)
 Gecko/20100101 Thunderbird/52.7.0
MIME-Version: 1.0
In-Reply-To: <f013fd38b474b5547dfd6b6e7e21dbce@freebsd.org>
Content-Type: text/plain; charset=utf-8
Content-Language: en-GB
Content-Transfer-Encoding: 8bit
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.25
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports/>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 27 Mar 2018 14:07:17 -0000



On 27/03/2018 13:52, Bernard Spil wrote:
> Hi all,
> 
> Just noticed that the Apache project has removed the patches they had
> for 2.2.34.
> 
>     http://www.apache.org/dist/httpd/patches/apply_to_2.2.34/
> 
> Combined with the security update of 2.4 branch to 2.4.33 leads me to
> believe that Apache 2.2 is now vulnerable and no patches will be provided.
> 
> If someone wishes to step up and get patches for 2.2 from e.g. RedHat,
> we may be able to keep the port alive for a bit longer. If no one steps
> up, I see no other way forward than to delete the port as indicated by
> the DEPRECATED variable and expiration date 2017-07-01 since July 2016.
> 

While I agree that apache 2.2 is now firmly dead, they moved the patches
for 2.2.34 to
https://archive.apache.org/dist/httpd/patches/apply_to_2.2.34/ , however
no new patches for the recent CVEs were added.


Vince



> Cheers,
> 
> Bernard.
> _______________________________________________
> freebsd-ports@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-ports
> To unsubscribe, send any mail to "freebsd-ports-unsubscribe@freebsd.org"