./www/apache24, Apache HTTP (Web) server, version 2.4

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2013Q2, Version: 2.4.6, Package name: apache-2.4.6, Maintainer: ryoon

The Apache HTTP Server Project is an effort to develop and maintain an
open-source HTTP server for various modern desktop and server operating
systems, such as UNIX and Windows NT. The goal of this project is to
provide a secure, efficient and extensible server which provides HTTP
services in sync with the current HTTP standards.

This package tracks 2.4.x release.


Required to run:
[devel/apr-util] [devel/apr] [devel/pcre]


Package options: apache-mpm-prefork

Master sites: (Expand)

SHA1: 16d8ec72535ded65d035122b0d944b0e64eaa2a2
RMD160: 27baf9cdfc60f578c1f692137cd2d4b608e3361d
Filesize: 4833.884 KB

Version history: (Expand)

CVS history: (Expand)


   2013-07-30 22:17:50 by Matthias Scheler | Files touched by this commit (8) | Package removed
Log message:
Pullup ticket #4193 - requested by ryoon
www/apache24: security update

Revisions pulled up:
- www/apache24/Makefile                                         1.21 via patch
- www/apache24/PLIST                                            1.11
- www/apache24/distinfo                                         1.10
- www/apache24/patches/patch-support_htdbm.c                    deleted
- www/apache24/patches/patch-support_htdigest.c                 deleted
- www/apache24/patches/patch-support_htpasswd.c                 deleted
- www/apache24/patches/patch-support_passwd__common.c           deleted
- www/apache24/patches/patch-support_passwd__common.h           deleted

---
   Module Name:	pkgsrc
   Committed By:	ryoon
   Date:		Tue Jul 30 12:51:29 UTC 2013

   Modified Files:
   	pkgsrc/www/apache24: Makefile PLIST distinfo
   Removed Files:
   	pkgsrc/www/apache24/patches: patch-support_htdbm.c
   	    patch-support_htdigest.c patch-support_htpasswd.c
   	    patch-support_passwd__common.c patch-support_passwd__common.h

   Log message:
   Update to 2.4.6

   Changelog:
   Security buxfixes.
       SECURITY: CVE-2013-1896 (cve.mitre.org) Sending a MERGE request against a \ 
URI handled by mod_dav_svn with the source href (sent as part of the request \ 
body as XML) pointing to a URI that is not configured for DAV will trigger a \ 
segfault.
       SECURITY: CVE-2013-2249 (cve.mitre.org) mod_session_dbd: Make sure that \ 
dirty flag is respected when saving sessions, and ensure the session ID is \ 
changed each time the session changes. This changes the format of the \ 
updatesession SQL statement. Existing configurations must be changed.

   And feature enhancement and bugfixes.