Next | Query returned 136 messages, browsing 101 to 110 | Previous

History of commit frequency

CVS Commit History:


   2004-10-29 13:51:00 by Min Sik Kim | Files touched by this commit (1)
Log message:
Set directory permission to PKGDIRMODE to avoid creating a read-only
directory; deinstalling files from a read-only directory fails on
Linux.

OK'ed by adrianp@.
   2004-10-26 06:57:12 by Juan Romero Pardines | Files touched by this commit (1)
Log message:
Replace the .elif statement for APR_USE_OPENLDAP with a new .if
block to fix the problem reported in PR pkg/27442 by Rasputin.
   2004-10-03 02:13:34 by Todd Vierling | Files touched by this commit (908)
Log message:
Libtool fix for PR pkg/26633, and other issues.  Update libtool to 1.5.10
in the process.  (More information on tech-pkg.)

Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and
installing .la files.

Bump PKGREVISION (only) of all packages depending directly on the above
via a buildlink3 include.
   2004-10-02 17:51:41 by Jeremy C. Reed | Files touched by this commit (1) | Package updated
Log message:
Get rid of PKGREVISION since just updated apache2 version.
   2004-10-02 17:47:03 by Jeremy C. Reed | Files touched by this commit (5) | Package updated
Log message:
Update apache to apache-2.0.52.

Also added comment to www/apache2/Makefile.common to remind to
update checksum in devel/apr also.

No actual devel/apr changes seen.

Also removed www/apache2/patches/patch-ab because it is identical to
fix for security in new version.

Changes with Apache 2.0.52
  *) Use HTML 2.0 <hr> for error pages. PR 30732 [André Malo]
  *) Fix the global mutex crash when the global mutex is never allocated
     due to disabled/empty caches. [Jess Holle <jessh ptc.com>]
  *) Fix a segfault in the LDAP cache when it is configured switched
     off. [Jess Holle <jessh ptc.com>]
  *) SECURITY: CAN-2004-0811 (cve.mitre.org)
     Fix merging of the Satisfy directive, which was applied to
     the surrounding context and could allow access despite configured
     authentication.  PR 31315.  [Rici Lake <rici ricilake.net>]
  *) Fix the handling of URIs containing %2F when AllowEncodedSlashes
     is enabled.  Previously, such urls would still be rejected.
     [Jeff Trawick, Bill Stoddard]
  *) mod_mem_cache: Fixed race condition causing segfault because of memory being
     freed twice, or reused after being freed.
     [J. Clar, W. Stoddard, G. Ames]
  *) Add -l option to rotatelogs to let it use local time rather than
     UTC.  PR 24417.  [Ken Coar, Uli Zappe <uli ritual.org>]
  *) mod_log_config: Fix a bug which prevented request completion time
     from being logged for I_INSIST_ON_EXTRA_CYCLES_FOR_CLF_COMPLIANCE
     processing.  PR 29696.  [Alois Treindl <alois astro.ch>]
   2004-10-02 09:01:00 by Jeremy C. Reed | Files touched by this commit (2)
Log message:
APR_USE_DB4 recently changed from YES to NO,
so bump the PKGREVISION and bump the buildlink dependency
needed because previously it wanted libdb4 and now it doesn't it.

This fixes build problem with apache2 because of missing -ldb4.
   2004-09-26 01:41:26 by Eric Gillespie | Files touched by this commit (1)
Log message:
Add APR_USE_DB4 to BUILD_DEFS.
   2004-09-22 10:10:08 by Johnny C. Lam | Files touched by this commit (703)
Log message:
Mechanical changes to package PLISTs to make use of LIBTOOLIZE_PLIST.
All library names listed by *.la files no longer need to be listed
in the PLIST, e.g., instead of:

	lib/libfoo.a
	lib/libfoo.la
	lib/libfoo.so
	lib/libfoo.so.0
	lib/libfoo.so.0.1

one simply needs:

	lib/libfoo.la

and bsd.pkg.mk will automatically ensure that the additional library
names are listed in the installed package +CONTENTS file.

Also make LIBTOOLIZE_PLIST default to "yes".
   2004-09-20 19:13:06 by Adrian Portelli | Files touched by this commit (5)
Log message:
- Update apr to 2.0.51
- Fix permissions on installed .h files

- ok'ed snj@, wiz@
- Thanks to epg@ for final check

This version of Apache is principally a bug fix release. Of particular note is
that 2.0.51 addresses five security vulnerabilities:

An input validation issue in IPv6 literal address parsing which can result in
a negative length parameter being passed to memcpy.
[CAN-2004-0786]

A buffer overflow in configuration file parsing could allow a local user to
gain the privileges of a httpd child if the server can be forced to parse a
carefully crafted .htaccess file.
[CAN-2004-0747]

A segfault in mod_ssl which can be triggered by a malicious remote server,
if proxying to SSL servers has been configured.
[CAN-2004-0751]

A potential infinite loop in mod_ssl which could be triggered given
particular timing of a connection abort.
[CAN-2004-0748]

A segfault in mod_dav_fs which can be remotely triggered by an indirect lock
refresh request.
[CAN-2004-0809]

For further details, see http://www.apache.org/dist/httpd/Announcement2.html
and http://apache.rmplc.co.uk/httpd/CHANGES_2.0.
   2004-07-17 02:14:26 by Juan Romero Pardines | Files touched by this commit (1)
Log message:
Add APR_CONFIGURE_ARGS=--with-ldap, missed in previous.

Next | Query returned 136 messages, browsing 101 to 110 | Previous