[pkgsrc/pkgsrc-2004Q3]: pkgsrc Security Pullup - requested by Matthias Scheler

[agc <agc%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/b5b3a884c89a
branches:  pkgsrc-2004Q3
changeset: 480721:b5b3a884c89a
user:      agc <agc%pkgsrc.org@localhost>
date:      Sun Oct 24 11:52:09 2004 +0000

description:
Security Pullup - requested by Matthias Scheler
security fix for ap-ssl

        Modified Files:
                pkgsrc/www/ap-ssl: Makefile distinfo

        Log Message:
        Update "ap-ssl" package to version 2.8.20. Changes since version 2.8.19:
        - With OpenSSL 0.9.7, prevent session resumption during a
          renegotiation to force the client to negotiate a new (and
          acceptable to mod_ssl) cipher suite. Additionally, ensure
          that a correct cipher suite has been negotiated afterwards
          (CAN-2004-0885).
        - Fixed more printf(3) style format string bugs (not security
          related) which could crash the server if mod_ssl's trace
          or debug log level is enabled.


        To generate a diff of this commit:
        cvs rdiff -r1.83 -r1.84 pkgsrc/www/ap-ssl/Makefile
        cvs rdiff -r1.22 -r1.23 pkgsrc/www/ap-ssl/distinfo

diffstat:

 doc/CHANGES-pkgsrc-2004Q3 |  4 +++-
 www/ap-ssl/Makefile       |  6 +++---
 www/ap-ssl/distinfo       |  6 +++---
 3 files changed, 9 insertions(+), 7 deletions(-)

diffs (43 lines):

diff -r 95de7e0c3106 -r b5b3a884c89a doc/CHANGES-pkgsrc-2004Q3
--- a/doc/CHANGES-pkgsrc-2004Q3 Sat Oct 23 07:41:20 2004 +0000
+++ b/doc/CHANGES-pkgsrc-2004Q3 Sun Oct 24 11:52:09 2004 +0000
@@ -1,4 +1,4 @@
-$NetBSD: CHANGES-pkgsrc-2004Q3,v 1.1.2.9 2004/10/20 16:33:44 agc Exp $
+$NetBSD: CHANGES-pkgsrc-2004Q3,v 1.1.2.10 2004/10/24 11:52:09 agc Exp $
 
 Changes to the packages collection and infrastructure on the
 pkgsrc-2004Q3 branch:
@@ -21,3 +21,5 @@
 security fix for tiff
 Pullup ticket 123 - requested by Takahiro Kambe
 security fix for squid
+Security Pullup - requested by Matthias Scheler
+security fix for ap-ssl
diff -r 95de7e0c3106 -r b5b3a884c89a www/ap-ssl/Makefile
--- a/www/ap-ssl/Makefile       Sat Oct 23 07:41:20 2004 +0000
+++ b/www/ap-ssl/Makefile       Sun Oct 24 11:52:09 2004 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.82 2004/08/27 06:29:11 jlam Exp $
+# $NetBSD: Makefile,v 1.82.2.1 2004/10/24 11:52:09 agc Exp $
 
-DISTNAME=              mod_ssl-2.8.19-1.3.31
-PKGNAME=               ap-ssl-2.8.19
+DISTNAME=              mod_ssl-2.8.20-1.3.31
+PKGNAME=               ap-ssl-2.8.20
 CATEGORIES=            www security
 MASTER_SITES=          http://www.modssl.org/source/ \
                        ftp://ftp.pca.dfn.de/pub/tools/net/mod_ssl/source/ \
diff -r 95de7e0c3106 -r b5b3a884c89a www/ap-ssl/distinfo
--- a/www/ap-ssl/distinfo       Sat Oct 23 07:41:20 2004 +0000
+++ b/www/ap-ssl/distinfo       Sun Oct 24 11:52:09 2004 +0000
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.22 2004/07/17 12:43:37 tron Exp $
+$NetBSD: distinfo,v 1.22.2.1 2004/10/24 11:52:09 agc Exp $
 
-SHA1 (mod_ssl-2.8.19-1.3.31.tar.gz) = aa6ecb4a87fffc99dad6f78845d4c660c741a9d0
-Size (mod_ssl-2.8.19-1.3.31.tar.gz) = 754277 bytes
+SHA1 (mod_ssl-2.8.20-1.3.31.tar.gz) = 10b4017241c7970d661521d4f04b7269bab8acb3
+Size (mod_ssl-2.8.20-1.3.31.tar.gz) = 754568 bytes
 SHA1 (patch-aa) = 6b66b8d9e8bd03613376dca3b4e0dad3a2e7ed15
 SHA1 (patch-ab) = 936bc956761559c51263cf7645d135abe40069cd
 SHA1 (patch-ac) = ebdd43a3ce98fbd20ea515e06eb7f41d440cd294