Subject: CVS commit: pkgsrc
From: Jeremy C. Reed
Date: 2004-03-22 20:50:16
Message id: 20040322195016.CD6DD2DA1D@cvs.netbsd.org

Log Message:
Update apache2 to 2.0.49. This includes various changes since last release
including:
  *) SECURITY: CAN-2004-0174 (cve.mitre.org)
     Fix starvation issue on listening sockets where a short-lived
     connection on a rarely-accessed listening socket will cause a
     child to hold the accept mutex and block out new connections until
     another connection arrives on that rarely-accessed listening socket.
     With Apache 2.x there is no performance concern about enabling the
     logic for platforms which don't need it, so it is enabled everywhere
     except for Win32.  [Jeff Trawick]

  *) SECURITY: CAN-2004-0113 (cve.mitre.org)
     mod_ssl: Fix a memory leak in plain-HTTP-on-SSL-port handling.
     PR 27106.  [Joe Orton]

  *) SECURITY: CAN-2003-0020 (cve.mitre.org)
     Escape arbitrary data before writing into the errorlog. Unescaped
     errorlogs are still possible using the compile time switch
     "-DAP_UNSAFE_ERROR_LOG_UNESCAPED".  [Geoffrey Young, \ 
Andr<E9> Malo]

Complete changelog is at http://www.apache.org/dist/httpd/CHANGES_2.0

Package changes include:

buildlink depends increased for apache2 (but not for apr).

apr package version changes, but APR_VERSION stays same.

more files installed and added to PLIST.
share/httpd/manual/search/manual-index.cgi removed from PLIST.
Also removing share/httpd/htdocs and share/httpd directories
removed from PLIST because already handled by MAKE_DIRS.
(I think this should use OWN_DIRS.)

(jlam@ said he would like this update done during freeze.)

Files:
RevisionActionfile
1.17modifypkgsrc/devel/apr/Makefile
1.7modifypkgsrc/devel/apr/distinfo
1.34modifypkgsrc/www/apache2/Makefile
1.7modifypkgsrc/www/apache2/Makefile.common
1.19modifypkgsrc/www/apache2/PLIST
1.6modifypkgsrc/www/apache2/buildlink2.mk
1.3modifypkgsrc/www/apache2/buildlink3.mk
1.24modifypkgsrc/www/apache2/distinfo